Mr. Sherman Frankel 
Professor of Physics 
University of Pennsylvania 
School of Arts and Sciences 
Department of Physics 
David Rittenhouse Laboratory 
Philadelphia, PA 19104-6396 

Dear Mr. Frankel: 

This letter responds to your November 16, 1992, Freedom of 
Information Act (FOIA) request. 

Due to the size and complexity of the Department of Defense 
(DoD) , there is no central repository for all DoD records. This 
Directorate is responsible for responding to requests for records of 
the components of the Office of the Secretary of Defense (OSD) and 
Joint Staff ( JS) , including ARPA. The several Components of the DoD, 
including the Military Departments, Unified Commands and separate 
Defense Agencies, operate their own Freedom of Information offices to 
respond to requests for records for which they are responsible. These 
procedures are provided in DoD Regulation 5400. 7-R, as published at 32 
CFR 286. 

Your request was processed by the Office of the Assistant 
Secretary of Defense for Command, Control, Communications and 
Intelligence (ASD(C3I)), which had provided the enclosed document 
as responsive to your request. After extensive consultation with 
other Agencies, including the Department of Energy, Defense 
Nuclear Agency and Information Security Oversight Office, Mr. 
Nathaniel Cavallini, the Deputy Assistant Secretary of Defense 
for Plans and Resources, an Initial Denial Authority for 
ASD(C3I), has determined that the release of portions of the 
document must be denied pursuant to 5 USC 552: 

-(b) (1), which applies to material which is currently and 
properly classified in accordance with Executive Order 12356. In 
this instance, some of the denied information is classified 
according to Section 1.3(a)(1), concerning military plans, 
weapons or operations; 1.3(a)(2), concerning the vulnerabilities 
or capabilities of systems, installations, projects or plans 
related to the national security; and 1.3(a)(6), concerning 
scientific or technological matters relating to the national 
security. Additional information which is unclassified when 
standing alone has been denied as classified in accordance with 
Section 1.3(b), concerning information, the release of which in 





the context of other information reasonably could be expected to 
cause damage to the national security. 

-{b)(3), which applies to information specifically exempted 
by a statute establishing particular criteria for withholding. 
In this instance, the statutes are 10 USC 128, which provides 
authority to withhold unclassified special nuclear weapons 
information, and 42 USC 2161-2168, which provides authority to 
withhold information regarding atomic energy, restricted and 
formerly restricted data under the Atomic Energy Act if 1954. 

You have the right to appeal the decision to deny this 
information. Any such appeal should offer justification to 
support reversal of the initial denial and should be forwarded 
within 60 calendar days of the date of this letter, to: 

Office of the Assistant to the Secretary of 

Defense for Public Affairs 
Directorate for Freedom of Information 

and Security Review, Room 2C757 
1400 Defense, Pentagon 
Washington, DC 20301-1400 

There chargeable costs for processing your request have been 
waived in this instance. 

Sincerely, 



D. J. Blakeslee 
Acting Director 
Freedom of Information 
and Security Review 

Enclosure : 
As stated 
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PREFACE nn 

(U) on December 20. 1990. Secretary of Defense Chen^^^^ 

was specifically tasked to explore the ^esirabiUty and teasiom^ o 5 
Tded control devices on U.S. nuclear weapons at sea ttie des^^^^^ 
feasibility of placing Post-laundi <i^^^^^ 

as an additional safeguard ^g^^t an unaumomea ^^^^^ 
S?l"*ScS=^sStS^r^4^^^^^^^ 

technological breakthrough, or deUberate act. The penoa 01 imc 
stated as 1991 to 2011. 

,U, Arnbassador Jeane J Ifl^awck^^^^^^ ^^^L^^^f 
United Nations, was selected to save as f'^^X;^°^s,s^t Secretary of 
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EXECUTIVE SUMMARY (U) 



(U) BACKGROUND 




(U) The Advisory Committee's study process «^P^^^?f ^l^^-.tt^e 

S working and Study Groups vifed many i— to 
ensure that the informaUon germane to the review was cu^em 
completely understood. When questions were raised or tne neea lo 
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addiUonal informaUon was identified. foUow-oii ^nefings or 

made. Each Working and Study Group penodicaUy "^'^^^^^Zind^ 

issues, candidate criteria of merit and assessments Recon^^ 

enhancements were identified for the Advisory Committee s evaiuauon an 

approval. 

(U) Three mechanisms ensured the todependence "f ^^Jf „^^Xes 
balanced perspecUve by the Working and Study Groups: ttie use of 
from leadSig authorities "^^^i^ZV^y^'^^^^^'^^Z^^^^ 

IfSJl'^* N"^r6U^1ro"ed^^. If" 
ld^S>% CoSeS taSstS^e on receiving any minority views on aU 
fetue^^d r^ris offered by the Working and Study Groups. 

(Ul Chanees in the last five years and especially the dramatic changes 
Since UiefoSon ort?.is Advisory Committee have led to reducUons to toe 

to increase the failsafe characteristics of the NCC5. 

(U) The threat of a massive surprise attack on the U S. or its ^Jies In 
the prisenf security environment has virtuaUy disappe^e^^ 
weU-defined threat has been replaced by a more ^f^^^f 
threat environment. This fiuid security environment is charactenzed Dy 
^otentiS^tos^^ Russia and other states with P°^erf"l '^".^ f.^/^- 
arsSSl ?s well as by the accelerating proUferation throughout the TOrd 
World of nuc^ar weapons technology. oSier weapons of mass destruction 
and tiie me^s to deliver them. Moreover, we are increasingly aware of the 
CitS effectiveness of measures to detect, check and reverse ttiis 
dS/erous proliferation which is fueled by the spread of knowledge ^d 
ad^iced technology as well as by the commitment by Third World states of 
substantial resources to obtain these weapons. 

(U) Nuclear proliferation takes on increased importance in long-term 
u S securitv concerns as the primacy of the East-West nuclear 
S;nfroS^So^ sub^^^^^^ The shift away from a bipolar worW is resulting in a 
mJrrf^Smented and unpredictable system. New international and regional 
?ctSs issuls, Sid threats should be addressed as we develop relevant 
docWnS! p^^^^^ force capabilities, and institutions capable of de^mg 

SSuTa^der range of tiireats. some of which may spring from new nuclear 
powers that oppose the United States. 

(U) FUTURE THEMES 

(U) -me changing environment occasioned the need to rea^^^^^ 
overall NCCS and the easting balance between the often competing assurg 
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assureagainstlgsals. This envtronment also provided the backdrop ag^st 
wt^r^e Advisory C ommittee considered near- as ^f^^^f^^-'l^J^^'"^' 
procedural, and technological initiatives and enhancements m^addres^^ 
new nuclei: failsafe and risk reduction challenges and opportunities. Basea 
Spon SS e^ol^g security enviromnent. the Committee concludes that four 
coherent "themes" should shape the future NCCS: 

. (U) We will continue to rely upon nuclear ^fapo^s as an essential 
element of our deterrence policy. ;nierefore. i^^^jpective of the 
number of weapons that remain in tiie active stockpile, the 
SSen^ce of appropriate nuclear weapons safety, security and 
Si sTouW remai^one of the highest priorities ^^esources^ 
The reduced sense of immediate threat should not be Pennitted to 
aUow Kdsting nuclear weapons safety, security arid contirol measures 
to deteriorate or planned improvements to languisti. 

. (U) It is appropriate tiiat we continue to enhance positive 
measures which sti-engtiien safeguards against unautiior^ed or 
inadvertent use. These enhancements should be pursued in a time- 
phased maimer as resources permit. 

. tU) We should continue to ensure that U.S. nudear forces 
resDond effectively and in a timely manner to Presidential direction, 
^^le 4 smve to^improve tiie failsafe characteristics of our nuclear 
^es^d adopt additional safeguards to reduce the nsk of nuclear 
war. tiie U.S. should recognize tiie ^npredictabiUty of th^^ 
international security environment and tiie fact that current 
prornising relations and tirends could deteriorate The U.S. should 
SndTrtSS no initiatives tiiat are irreversible or that irrevocably 
foreclose options and flexibiUty to the President. 

. (Ul Finally, requirements for timely and accurate intelligence 
comrnunity assessments of tiie capabilities and intentions of current, 
new and emerging powers possessing or pursuing weapons of mass 
destruction will increase. 

(U) OVERALL NCCS ASSESSMENT 

(U) The NCCS. which has evolved over tiie last five decades, reflects 
tiie United States' continuing goal of assuring tiie highest standards of 
nuclear weapons safety, security and contirol. NCCS procedures, 
technologies, and equipment have been developed and personnel highly 
tirained to assure tiie responsive, effective, and efficient conduct of 
autiiorized nuclear operations. At the same time, numerous, redundant and 
mutually reinforcing layers of safeguards and positi_ve nieasures addressing 
all aspects of tiie weapon life-cycle have been developed to ensure that 
unauthorized or inadvertent use does not occur. 
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(U) The Department of Defense (DoD); with extensive support from 
the Department of Energy (DOE), allocates significant attention, talent, ana 
resources to maintaining effective safety, security, and control ot nuciear 
weapons. Both departments are responding to recommendaUons oi 
pre^^ous high-level panels in the areas of safety (i.e.. DreU. Moe. and Cl^K 
studies) and security and control (Joint Chiefs of Staff Nuclear CommaiKi 
and Control Study, i.e.. the Horton Report). For instance. ^oD and DOE 
have formed a Joint Advisory Committee on Nuclear Weapons Surety to 
advise the Secretaiy of Defense and the Secretary of Energy "^fj^^^f^^ 
related to protecting against inadvertent nuclear detonation or plutonium 
scatter. These efforts are contributing to tiie "lulti-layered syste^^ 
safeguards and controls. Furthermore. DoD and DOE are taiplemenmg the 
President's September 1991 and January 1992 Nuclear Initiatives, wW^^ 
tiiemselves were a response to the radically changed security en^aronment 
and are making their own positive contlbutions to safety, security and 
??ntr^l TT^%ntinns. alo ^ ^ with nther Ion f^pr-term Initiatives , ^re making 
the nnrlear stnrkpile and o ur nnrlear forces safer and more secure . As part 
of its review, tiie Advisory Committee worked closely witii responsible 
offices and identified areas requiring improvements. Action is already being 
taken in many of these areas by appropriate agencies. 

(U) FAILSAFE AND OVERSIGHT ENHANCEMENTS ARE POSSIBLE 

(U) Nevertheless, in light of the evolving security context ^d 
technological advances, important additional enhancements are feasible to 
sf engthen all layers of the existing safeguards against unauthoi^^^ 
inadvertent use. These potential enhancements, identified in tiie body of 
this Report, include: 
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(U) RISK REDUCTION ENHANCEMENTS ARE POSSIBLE 

(U) The demise of the Soviet Union and the accelerating proliferation 
of nuclear weapons technology and associated means of delivery present the 
U S with significant nuclear risk reduction opportunities and challenges. 
In addressing these complex issues, we should balance responsiveness to 
today's opportunities witii prudence that reflects the highly uncertain and 
changeable nature of tomorrow's security environment. For tiiis reason, tiie 
Advisory Committee recommends tiie development of several risk reduction 
measures that deal with the range of scenarios the U.S. may face in a 




ES^e 



TOr O ECRET ■ FRD ■ NOFORJi ■ WNINTEL 



TOP SECRET ■ FRD — WOFORN WNINTEL 




• (U) The establishment of govemment'to-govemment 
comimmications designed for contingency use by heads of state or 
governments to assist in nuclear weapons accident no^fica^n and 
other areas of crisis management; 



• (U) The encouragement of bilateral and regional risk reduction 
measures by nations in areas of greatest prolQeration concan; and 



• (U) Transfer and/or exchangef in appropriaU caseSf of nuclear 
weapons safety technology, use control/denial conceptSf and 
physical security concepts and technologies. 
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KEY NUCLEAR FAILSAFE AND RISK REDUCTION ISSUES AND 

RECOMMENDATIONS (U) 

(U) This section identifies the key nuclear failsafe and risk reduction 
issues and sub-issues investigated by tiie Advisory Committee summanzes 
Its significant findings and recommended enhancements each major 
issue? and Usts the FARR Final Report's recommendations by issue. 

(U) Following initial review and research, tiie Advisory Committee 
formulated six major issues to support its investigation of the NCCS. 
Working and Study Groups were tiien assigned to assess each issue. Based 
upon the results of this detaUed assessment, specific sub-issues were 
deemed appropriate for further investigation. Both the overaU issues and 
specific sub-issues are listed below. 



ISSUE 1: 




ES-9 



■ TOP CECRET - FRD NQ^ Oi^ '< ' WTHNTEL ' 



TOr OECRET ■ riiD MO i'oi m wrmiTr Tr 




^Or GECRET ■ FRD ■ JiO i' OIUJ WWNTE Tt 




SUB-ISSUE 1-3: 
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-tSh SUB-ISSUE 1-6: 



CU) Issue 




(yj Recommendation 
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(U) ISSUES: NCCS SAFETY. SECURITY AND CONTROL ? 

(U) Are current DoD procedures, equipment, and facilities adequate to 
maintain the required standards of nuclear weapons safety, security, and 
control under the full range of stockpile condiUons? (Page IV-52) 

(U) Advisory Committe^ignificant findings; 

• (U) The layered approach of personnel actions, procedures, physical 
security safeguards, and nuclear weapons design features effecUyely 
maintains positive control over nuclear weapons. The combination is 
important since no single factor can be. made perfect. 

• (U) Loyal and capable personnel compose the most important layer 
in the system of positive measures. , 
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(U) Advisory Committee key enhancements: 

. (U) Continue to support the highest personnel reUability standards. 

. (U) Maintain appropriate plans and effective procedures to support 
any redeployment of nuclear weapons. 

(DuD ucrm 




. tU) Set and maintain high security standards for all automated 
systems and software. 




(U) SUB-ISSUE 3-1: PERSONNEL RELIABILITY 

(U) Issue 

(U) What enhancements should be made to the DoD Personnel 
Reliability Program to provide the required level of protection to nuclear 
weapons? (Page IV-56) 

(U) Rftcommendattons 

• CU) Maintain strong continuing commitment to the highest 
versonnel reliability standards. Specifically maintain a vigorous 
Personnel Reliability Program (PUP) for DoD and contractor personnel 
involved in all aspects of nuclear command and control (weapons 
handling, maintenance and transportation, software read/write access, 
control/access to nuclear command and control code material, etc.). 
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iDith NCCS responsibilities, 
. fW rv»rpersom.eI assigned to theNCCS ««u«^^ 
pr'Saution taken to enhjmce pa^?™«' 

luith national guidance, administer '^°f}°°^^^^^i^i^uals who are 
positions." 

(U) SUB-ISSXJE 3-2: | 
(U) Issue 




(U) Pprnmnie r»^ations 
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(U) Recommendations 
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(U) Recommendations 




SUB-ISSUE 3-5: 
(U) Issue 




lU) Recommendations 




ISSUE 4: I 
(U) Issue 



m 
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ISSUE 5: RISK REDUCTION 



(U) Issue 

(U) What confidence-building and predictability "^^^^^^^^^^i^^^^^ 
sharing of appropriate technologies, systems, ^formation and procedure 
Should be liAplemented to reduce the risk of nuclear hostilities with any 
power? (Page VI-4) 

(U) Advisory Committee significant findings: 

. tU) There is a growing mutuality of interests in risk reduction ^d 
the safety, security and control of nuclear weapons between the U.S. 
Sid Russia U.S. and Russia have conducted substantive discussions 
on a wide range of nuclear command and control matters. 
Furthermore, an opportunity of uncertain duration exists to achieve 
these objectives. 

• (U) The U.S. is already engaged in many bUateral and multUateral 
risk reduction initiatives. 




• (U) The U.S. should consider the transfer of selected technologies 
and information that could reduce the possibility of a nuclear detonation 
if such transfers do not degrade U.S. non-proliferation objectives, 
enhance the operational effectiveness of the recipient nation or 
jeopardize the U.S. Nuclear Command and Control System. The DOE 
national laboratories can play a key role in this process. 

• (U) Risk reduction initiatives should go beyond traditional arms 
reduction agenda. 

(U) Advisory Committee key enhancements: 

. (U) Establish nuclear weapons incident multilateral consultation 
agreements. 

. (U) On a case-by-case basis, ti-ansfer selected nuclear weapons 
system safety, security and control technologies that are consistent witii 
the full range of U.S. security objectives. 
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. (U) Pursue new dialogues and iniUatives ^.^^^^^f^l^^' ^^^^ 
Soviet republics, and emerging powers, including joint measures to 
reduce proliferation and to provide timely warning. 

(U) Pppommendations 

. (U) Expand appropHate bilateral atui regional informati^^ 
J^rS^^vc^n ^asvres with nations in areas of greatest 
prol^eration concern. 

.CO) Establish multilateral agreements for consultation^^ 
a Zclear weapons incident. These measures would rely on timely ana 
assia^d communications. 




. (0) Establish crisis communications capabilities among appropHate 
nations of a region. 

. CU) Transfer and/or exchange, in appropriate cases, nuclear weapon 

rSu« SSriste oj^ accidental or inadvertent nuclear lueapon 
5r^^^n.~^Su4oHzed vse. or acts "Z*-™^ '^at m^Jeadto 
misintervretation, miscalculation, or hostilities. This transjer ana/or 

Xuld be conditional on mechanisms that ^^^Jjl^^ . 
Mfonnarion does not degrade efforts to prevent the proliferation of 
n^U^Tap^Zha^e the operational -irectiu^ne^^ the ^^^^^ 
nationTsj. or jeopardize the safety, security or control of U.S. nuclear 
weapons systems. 

. (U) The National Laboratories can play a distinctive and important 
role in the process of determining appropriate technologies, 
procedures, systems and system data to consider. 

Former Soviet Union (U) 
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. (U) Establish govemment-to-govemment ^omnrnnicaUoi^.^signed 
for contingency use by heads of state, for states ^f}^g'^%^'^S 
Union with which the United States has signed START ^ff^^^^^^^^. 
i^d/or those with which we wish to establish nuclear weapon accident 
response not^cation agreements, 

. fin To exploit the current window of opportunity for ^ffJ^^'\3mrisk 
reduction^at now exists with Russia and the republics ofthe former 

soviet union, the United States should move 

anns reduction agenda and pursue new imtiatives. 0(0) is already 

pursuing many of these initiatives.) These areas mclude. 

- (U) Joint measures (e.g., intelligence shaHng) to reduce 
proliferation; 

- (U) Joint initiatives to provide timely waming; 

- (U) Overview of U.S. and Russian/Commonwealth of 
Independent States command structures; 

^ (U) A lexicon on command and control terminology ^^ich 
would support future cooperative efforts and confidence building 
measures; 

(U) A dialogue on nuclear command and control oversight, 
command and control assessment techniques, and i^e control 
policies and standards with the aim of^^P^'^^^'^d bothsid.es 
^mmand and control capability to prevent unauthorized launches, 
cmd 

- (U) Discussions on early deactivation of forces to be reduced 
under signed agreements. 



People's Republic of China (U) 



- ( 6 /NFl 




Undeclared/Emerging Nuclear States (U) 
. (U) Consider a Multilateral Nuclear Incidents Agreement, open to all 
nations, patterned after the U.S. USSR "Accident Measures and 
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'Prevention of Nuclear War" agreements, and ^^^"^^^^^ 

respect to possession/development of nuclear ^^^P^"^^^^ ^ 

a^activerisk reduction model for this category of nations. 



(6) ISSUE 6: 
(U) Issue 




(U) Advisory Committee significant findings: 




(U) Advisory Committee enhancements: 




(U) 'Rftpommpndations 
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CHAPTER OPJE 
THE SCOPE. STRUCTURE AND PROCESS OF THE 
FARR INDEPENDENT REVIEW (U) 



(U) THE SCOPE 




(U) Over the course of its investigation, the Advisory Committee's focus 
broadened, consistent with its charter, to address related Issues (e.g.. the 
role of coded control devices on all future weapons /weapons systems and 
the level of protection they should afford). Also, the failsafe aspect of the 
charter made it necessary to- assess all aspects of the current and 
programmed NCCS which is enjoined to meet the dual requirements of 
assuring the authori7.pf1 use of nuclear wea pons while Rssuring nf^amst thgir; 
unauthorized or inadvertent use . NaUonal guidance mandates an 

♦ Note to the Reader: A full listing of acronyms contained in this Report 
appears at the beginning of this document. 

M 
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o«T.rnnriatp balancc between these sometimes competing objectives. 
Sg -duswely on toe latter could have ^---^^^ l^^^^f^^^^^i '""^ 

S^^dTSftke^Si^cf^^S^^^^^^^^ 
the President to the individual weapons systems. 

(U) The Committee also recognized that the ^^^^l^^f Jj^J^ 
nuclear proUferation mitigated against an exclusive focus on ^^^^^^ 
Union aAd later Russia and the other former ?oviet RepubU^^^^^ 
apparent that timely and accurate all-source "^telUg^^ce^^^^^^ 
diplomatic and technical information, would become increasmgiy essenuai 
to our ability to deal with the emerging world. 



(XI) ISSUES INVESTIGATED 

ixn Table 2 lists the broad organizing issues that evolved over tiie course 
of S re^Sl to focus an J direct FARE analytical initiatives These general 
?ssues Sie^S to tiie many related sub-Issues which are IdentiHed and 
discussfd throughout this Report and In its supporting Appendices. 

(U) THE STRUCTURE AND PROCESS 
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I ^^ T^^rm,cvr '^« ...„«aff. and ptitt FFprrTioN issues 

1 Failsafe and Positive Measures I 

.What NCCS vulnerabilities exist and ^h^^ „men^^^^^^^^ *° 
strenethen DoD positive measures to prevent accidental, inadvertent. 
S SIuiIng authorized use of nuclear weapons? 

. Should the united States implement -d^i -^^^^^^^ 
future nuclear weapons systems? If so. what types of devices an 

Isystems? I 

I are required? I 

. Are current DoD ^"^^1?^^^^^^^ 
required standards of nuclear weapons safety, security, ana co i 

I stockpile conditions? 1 
1 2. NCCS Oversight I 

. Should the DOD develop a con«hda«d po^^^^^^ 
nuclear weapons safety, security, and control "V" «™f ou^ ability to prevent 

Siorhf.M»n"-^^^^^ 

Ipolicy? . - I 

. What measures should be taken to improve overs^ht of the Nuclear Comtnand and 

Control System (NCCS)? I 

(3. Risk Reduction I 

lpp.p;arL^h°^^^^^^^^^^ 

^IS^X^n^ofJcl^ar hostUities with any powei? 

. Given the dramatically aUered -rld^^^^^^^^^^ 
measures should be taken to ^^PJ^^.^^J^^f^^'i^f,^^^^^^^ accuracy and 

informauon on nuclear weapons ^nd devices is p^^^^^ AddiUonally. what 

b^Sih°oSS?l1a£nrrSst?^^^^^ 
technology? 

I . UNCLASSIFIED ' 

TABLE 2 
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Defense, the Committee recruited and ^ ^^^f ^^^^ most 

orgSizations- leading nucle^ ^°Tf?rlaSon IvSem A^^^^ and the DOE 
SnovaUve thinkers. The Defense Informa^n^^^^ resources to 

Sandia National Laboratories dedic^ate^ substantive 
this project and. along with the ^toff. m^^^^^ ^P^ ^^^^ effort, 
contributions to the FARR Review ^J^^^\^^^^^'^the United States and 

(U, The Advisory Conunittee:s study pro^^^^^ 

oblecuvlty. and thoroughness. ^l^°^^^^^,^^^n^o\. risk reduction. 
Sriefings on aU aspects of ""^ear comnand c«iU . ^^^^^^^ 
non-proUferaUon. and toe cmrent projectea ^^^^p^ 
Committee, its Study Staff, and'or its ^^ous w b ^ 
visited many installaUons sites in the Unuea s.^ 

ensure that aU ^^^stion^weTr^^ or the need for 

completely understood. When l^Jy^ briefinas or visits were 

addiuonal information 'den^ified. foU^^^^^ ti^l 

made. Each Working f udy Grmip peiimucai^ Recommended 

S^^e^U reTd?^tit?!» t^r— evaluation and approval. 

tU, independence of analysis ^^^f-^^^'^VS S ^T""' 
groups were ensured by three mechamsms. "^4° ton various FARR 
gOTiLttee from leading ""J'?^ SatSig the effecUveness of 

sSlgS=^^ ^^^^^''^J^X^^^^ on an 
,U) This report contains -"tiVeTSbleTnoulSt 

(U) The committee enjoyed excellent cooperaU^ from ^1^^^^^ 

nucUar command and ^n^ncef toe*^— e^*d\^^^^^^ ^eas of 
investigation. In "^.^^y '"^t^"<="^^^ improving the system in 

~Ts?on»"wi;?.= t«^5i™^^^^^^^^^ 

rtSlnWo^t^e Sre\?;^ingTmp~ed. 
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CHAPTER TWO 
THE EVOLVING SECURITY ENVIRONMENT: 
NEW THREATS. CHALLENGES AND OPPORTUNITIES (U) 
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CHAPTCR THREE 
U.S. NUCLEAR COMMAND AND CONTROL SYSTOMC^^ 
FAttSAFE AND RISK REDUCTION MEASURES OVERVIEW lU) 




(U) The variety and complexity of the warheads and weapons systems, 
as well as of the deterrence and potential warfighting missions they should 
perform, have evolved over a period of almost 50 years, ^^f, "^^^nner in 
which these weapons are controlled has also evolved. someUmes along 
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Hi<;similar lines dictated by service, theater, or operational requirements. 

g„ tu" p.oe^Hpnt .vhilP ^.ssurin cr ^..ninst unauthorized use.. The net result ot 
Sis evoTuUon h^^ been the developmen t of a Nuclear Command and Control 
System that is large and complex. 

(U) FAILSAFE MEASURES 

(U) A combination of procedures and design ^^^tures contr^ute t^ 
command and control of United States nuclear weapons. This combmation 
includes: 

• . PoslUve Measures to Assure Authorized Use. and 

Positive Measures to Assure Against Unauthorized Use. 

fUl This combination of procedures and design features supports the 
execution decfsion process and provides safeguards against unauthorized use 
K elemems of the nuclear command and control f'V^^^^'^^^^^'^^ 
ihV^nositive measures support warfighting and conflict termmation. 
&^detTrreSl. and^^so support the day-to-day deterrence posture 
of both United States nuclear weapons and the nuclear command and 
?onS-ol system, -mey are interlocking, with features of each influencing the 
oerform^ce of the otiier. Togetiier, tiiey provide a layered system of 
pSeS^features to support Presidential authority and the assure-assurg 
yi ?ainst balance . 
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(U) POSITIVE MEASURES TO ASSURE AUTHORIZED USE 



(U) As described above, the United States nuclear stockpile consists 
of various weapon systems over which Presidential authority, while having 
the same fundamental command and control requirements, may be 
implemented in different ways. The most time-urgent of these weapon and 
nuclear command and control systems are those of the strategic deterrent 
forces on day-to-day alert. For this reason, this description will begin with 
the alert strategic forces. The failsafe measures that are in place to prevent 
inadvertent or unauthorized use are summarized in Table 3 and described 
below. 
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TABLE 3 
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fTT^ In addition to the nuclear command and control system features 
that icLJ",l'HzTdus^ a^ elaborate system of failsafe measures to assure 
a gainst unauthorized execution has also been implementea. 
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(0) pOSITIVli MEASURES TO ASSIJSB AGAINST DNAOTHOBIZEDDSB 

(U) The preceding section described the 
crypt^grapSc futures ^P^f ^ t~apS^ "MoXg S^on 

measures that assure authorized use. 

CU) NUCLEAR COMMAND AND CONTROL SYSTEM PERSONNEL 

(U) The first layer of protection against unauthorized use rests witii 
the lovaltv S-aiSng. dedication and quality of the personnel involved. THey 
tl tSderpSnSgs that ensure that the rigorous procedures used in 
fol^olim^^^^oumn process as well as those used to pro^ade for the 

QPonri^^d control of nuclear weapon systems at the force level are 
»ely c^^^ incorporates a series of quality assurance 

measures SS^develop. maintain, and continually assess the personnel 
ass!|ne?to duUeT>^^ nuclear weapgns and nuclear command and control. 

CU) PERSONNEL RELIABILITY PROGRAM 

(U) The Personnel Reliability Program (PRP) ensures that only 
nersonnel of proper character are assigned to duty with nuclear weapons 
SuS^^S nude£- weapons does not always entail having access to weapons 
or wel^ons systems, as is the case with crew members or ma ntenance 
Ser^onnel It also includes those individuals who are responsible for 
luppo^ng ie systems, such as those who are involved 
deS process, controlling the code documents and sealed authenUcators. 
or in p?o^ding security for the nuclear weapon or criUcal equipment. 

(U) A member of the Personnel Reliability Program undergoes 
stringent initial screening, including a thorough background i^^^^ 
medical evaluation, and an intensive training program t>efore being certiliea 
Sid cleared by the unit commander to perform nuclear weapons-related 
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duties. Once assigned to nuclear weapon-related duties a^^^^^ 
performance on the job and behavior, both on ^nd off me Job are 
continuously reviewed. If any reason emerges to doubt a ^^f^f'^^^^^^''^^'' 
or reliabiUty. that person is immediately ^^^^ from duUe^^^^^^ 
nuclear weapons or nuclear command and control. If the unit comrnanaer 
SetemfinTsXT^^^ is serious, the individual is PJ^J/f^!;? ^° 
non m^clear related duUes. This acUon is administrative rather than 
punitive and can be accomplished quickly. 

(U) A key aspect of tiie Personnel Reliability Program is that it 
requires the active participation of all of the individuals in it. Both 
co^^ariders and co-workers are required to report any ch^ges m behavior 
o^^dTcal or emotional problems tiiat might affect the performance of 
Sdmduals wltii whom tiiey are assigned. Individuals are requi^^^^^^ 
voluntarily remove tiiemselves from the program for such Prfble^^s as well 
For SSiple. voluntary removal often occurs when a person is taking certain 
presold medications that affect alertness. Voluntary as ^/^Ifs other 
temporary decertifications from the program allow an indmdual to return to 
nuclear-related duties when any problems have been resolved. This 
XnS^ decertification and recertification process has been very beneficial 
in tiiat it encourages responsible actions by personnel with temporary 
personal or medical problems, because they know that voluntary 
decertification will have no negative impact on future assignments or career 
progression. 

(U) TWO PERSON POLICY 

(U) Personnel certified for nuclear weapon-related duties are trained 
and indoctirinated into tiie Two Person Policy. This policy dictates that no 
individual shall have sole access to a nuclear weapon, cntical component, or 
critical nuclear command and conti-ol systems or materials. During any 
operation when access is required, a minimum of two autiionzed persons 
must be present, each of whom is capable of detecting incorrect or 
unauthorized procedures witii respect to tiie task bemg performed and 
famiUar with applicable safety and security requirements, which include 
specific procedures to terminate such actions. These two individuals must 
be physically positioned where they can detect any incorrect or , , ^, 
u^iautihorized actions undertaken by tiie otiier. The policy is enforced by tiie 
persons who constitute tiie team and associated security personnel dunng 
the entire time they are perf-orming tiieir task or operation until the time 
tiiey leave tiie area requiring tiie Two Person Policy. Execution of tiiis 
poUcy provides a failsafe measure against botii deliberate and inadvertent 
acts tiiat might have a negative effect on a weapon or otiier critical 
component of the nuclear command and control system. 
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(m NUCIXAR COMMAND AND CONTROL STSTEMSECUMTT 

%t!^ Z^Sr^^le^T^^o^^^^^r^ oWng and 
synergistic. 




(U) PHYSICAL SECURITY 



Status. 
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wSron produc^^^ mose coding and 
»,XnticaUon documents and equipment: personnel Involved in toe 
DreolSuorsSd producuon of nucl^- weapons targeting tapes^d 

SS!;n^?ti%»™S^efr» 
InteUigence scope polygraph, examinations. 
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(U) ACCroENT PROTECTION FEATURES 



(U) The U.S. nuclear weapons program has never experienced an 
accidental nuclear detonation. However, a number of weapon or weapon- 
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TABLE 5 
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related accidents /incidents have occu-ed ^^^^^^^^^ 

been investigated in de^^^^^^^^ Lve 

=rinToth^e\» opeS c^^^^^^^^the ^^^^^ 
^^e have been no United States nuclear weapons accidents si^^^^ 
ie^tember of 1980, when one accident occurred. With that exception, 
there have been no accidents since 1968. 

tm Design features that prevent nuclear detonation o^T^^P°^^ . 



Table 5. 

■ poD U €W 




(U) NUCLEAR COMMAND AND CONTROL PROCEDURES 

(U) in addition to the failsafe capabilities provided by the Personnel 
and security programs and the design features incorporated into nuclear 
weapons Si we^^ systems, therl are detailed and rigorous procedures 
preYcribed for all Operations involving nuclear weapons, weapons systems 
and the NCOS The Emergency Action Procedures carried out by command 
?S?te?an?suboXate force personnel have.already been described in the 
Sscussl^n of the execution release process. Tliere are equally rigorous 
Operational Safety Rules, prepared for each nuclear weapon system and 
approved by the Secretary of Defense, which must be followed in the 
conduct of any operation involving nuclear weapons. In addition to these. 
Sere are otiier procedures dealing with the production distribution 
hSdling. and management of the positive control materials used in the 
NCOS. 

(U) NUCLEAR WEAPON OPERATIONAL SAFETY RULES 

(U) The Operational Safety Rules govern all aspects opera^°;i^, .„ 
involving nuclear weapons. The rules for a given nuclear weapon system will 
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rfirtate the Drocedures to be used in Its movement, storage, and^ 

SS«e: provide for Us securi^; ^ "i"' f^p^eTlS'^^i ^ 
wlU specify both the equipment to be used in ^^seoperMOM^ 

are described below. 




III-25 

TOP OECRLT ■ FRD N O PORN WWINTE Tr 



TOP OEGRET ■ FRD ■ NOFORN - WNlNTEIr 




III-26 



TOr DECRET ■ FRD NpI ' ORH WTHNTF Tt 




III-27 

TOP SECRET " FRD - TtOt O im - WTflNTE T- . 



TOr OECRET ■ FRD MOFOim WTmiTEIr 




(U) A seminal document supporting the assure against side of the 
balance Is DoD Directive 3150.2: "Safety Studies and Reviews of Nuclear 
Weapon Systems". This DirecUve establishes the Nuclear Weapon System 
Safety Standards which define safety very broadly and. in fact, encompass all 
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failsafe measures that assure against unauthorized use. THese standards are 
presented in Table 7. 




1 -mere shall be positive measures to prevent nuclear weapons involved 
iii accidents, or jettisoned weapons, from producing a nuclear yield. 

2 There shall be positive measures to prevent DELIBERATE prearming. 
araiing. launching, firing, or releasing of nuclear weapons except upon 
SSuUon of emergency war orders or when directed by competent 
authority. 

3. There shall be positive measures to prevent INADVERTEOT prear^ 
arming, launching, firing, or releasing of nuclear weapons in all credible 
normal and abnormal environments. 

4 There shall be positive measures to ensure adequate security of nuclear 
weapons, pursuant to DoD Directive 5210.41 (Security Policy for Protecting 
Nuclear Weapons). 

UNCLASSIFIED __ 



TABLE 7 



(U) Consistent with the requirements of DoD Directive 3150.2, each 
miUtarv Service conducts nuclear weapons safety studies and recommends 
soecific Operational Safety Rules for each nuclear weapon system. These 
studies are underi:aken during weapon development, prior to deployment, 
and periodically during the system's operational Ufe. A special safety study 
is undertaken each time the system is to be modified or a significant change 
in operational procedures is to take place. These studies examme all 
aspects of the weapon system for the purpose of identifytog necessary 
changes in design, deployment, or weapon system Operational Safety Rules. 
The studies are conducted jointiy by the Services, the Defense Nuclear 
Agency, and the Department of Energy, with technical support provided by 
Service Laboratories and the Department of Energy's National Laboratories. 
The safety of a weapon system's design, deployment, and operational safety 
is assessed against the Nuclear Weapons System Safety Standards. 
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(U) While the safety standards and the requirements for conducting 
safety studies are established by DoD directive, the actual implementaUon of 
the directive is delegated to the Services. The individual Nuclear Weapon 
Safety Study Groups are led by the owning Service which determines what 
aspects of the system are to be examined in any given study. This practice 
allows the content of the studies and their supporting inadvertent or 
unauthorized launch analyses and security assessments to differ between the 
Services. 

(U) The NCCS has been completely successful in preventing 
unauthorized or inadvertent use, accidental nuclear detonation, or theft of 
any U.S. nuclear weapon. The Operational Safety Rules, reviewed and 
approved by the Secretary of Defense for each nuclear weapon system, 
establish de facto policy for the failsafe measures that assure against such 
events. 
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Plow Chart 
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(U) Department of Defense (DoD) oversight of the NCCS ^ , 
administered in three functional areas: safety, seciirity. and control. Each 
DoD component assigned responsibilities within the NCCS has an inherent 
duty to oversee the implementation of those assigned responsibiUUes. The 
agencies and organizations responsible for both implementaUon and 
oversight of existing policies for safety, security and control of Umted States 
nuclear weapons are identified in Table 6. In addition, some DoD 
components are tasked to conduct independent oversight of NCCS activities 
for which they have no command or implementation responsibilities. 

(U) The Secretary of Defense has overall responsibility for the NCCS 
within the DoD. He is responsible for approving both promulgation of and 
changes to all Departmental NCCS policy and for ensuring that it is 
Implemented by his deputies. He also reviews and approves all nuclear 
weapon system Operational Safety Rules with the concomitant requirements 
for ensuring safety, security, and control. In addition, in his role as NCCS 
Executive Agent, he is responsible to the President for ensuring appropriate 
planning, integration, and oversight of the overall NCCS. 

(U) The inter-relationships between the Department components with 
assigned oversight responsibiUUes. their operational and administrative 
lines of command, and their lines of coordination and support in 
independent oversight functions are illustrated in Figure 7. The oversight 
process for the three functional areas is discussed below. 

(XJ) SAFETY OVERSIGHT 

(U) The Secretary of Defense has overall responsibility for nuclear 
weapons safety which he exercises both through his deputies* designated 
responsibiUUes in specific areas and through his review and approval of all 
OperaUonal Safety Rules. He is supported in this effort by the Under 
Secretary of Defense for Acquisition, who has primary responsibility for 
safety within the Office of the Secretary of Defense, and the Assistant to the 
Secretary of Defense for Atomic Energy, who has primary responsibUity for 
nuclear weapons system safety. He is further supported by a safety oversight 
system that involves numerous Department of Defense and Department of 
Energy operaUonal and technical design organizations and serves to . 
integrate their acUviUes through a formaUzed process that identifies safety 
issues and raises them to the highest levels within the Department for 
resoluUon. This process includes both the nuclear weapon safety studies 
and the extensive analyses of weapon-related accidents and incidents 
discussed above. It also includes the participation of Joint Project Officers' 
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Groups and Design Review and Acceptance Groups which both guide and 
direct wSpon development and changes throughout their We cycle and the 
Nuclear Weapons Council and its subordinate c°^ttew which have 
legislated responsibilities for nuclear weapons safety. AddiUonal oversight 
his been provided through independent safety reviews by ojjtside 
organizations (e.g.. the Clark Blue Ribbon Task Group, the pepartaent of 
Enl^ Moe CoWtee. and the House Armed Services Committee s D^^^^^ 
Pane§^ Each of these has provided findings which have led the Secretaries 
of Defense and Energy both to improve the nuclear ^^apons safety proM^^ 
and to study further safety improvements to the nuclear weapons stockpile. 

(U) SECURITY OVERSIGHT 

fU) Nuclear command and control system security oversight is 
predominantly focused on the physical and personnel security of nuclear 
weapons and weapon systems. Other aspects of security oversight 
(including communications, computer, information, and ^^^^^^^^^ ^^.r,^ 
security) are basically managed as an element of broader non-NCCS specific 
oversight processes. The Assistant Secretary of Defense for Command. 
Contirol. Communications, and IntelUgence is responsible for developing 
dSd security and personnel poUcies for the NCCS as well as for assessmg 
threats against it. 




(I^ CONTROL OVERSIGHT ; 














r '■ 



(U) The Assistant Secretary of Defense for Command, Control. 
Communications, and Intelligence is responsible for developing command 
and control poUcy. coordinating policy guidance between agencies, ana 
developing metiiods for evaluating NCCS performance. The Chairm^. Joint 
Chiefs of Staff, is responsible for developing the procedures that implement 
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those policies, and for conducting exercises and assistance visits to 
command centers to assess their effectiveness in implementing 
Departmental command and control policies. 




(U) OVERSIGHT INSPECTIONS 

(U) Common to all oversight areas is that each relies on inspections 
and assessments to support the oversight function. The inspection program 
is essentially spUt between assessments of those safety, secunty. and control 
measures that assure against unauthorized use and those that assure 
authorized use. 

(U) Assessments of the measures that assure against unauthorized use 
are centrally administered, through the Nuclear Weapons Technical 
Inspection Program, by the Defense Nuclear Agency. The governing 
document for these inspections is a joint Defense Nuclear Agency. Army. 
Navy, and Air Force publication which establishes a standardized inspection 
program. It delineates policy, assigns responsibilities, and prescribes 
standard procedures for conducting inspections of all nuclear-capable units. 
These procedures include frequency of inspections (not less than every 
eighteen months) and minimum requirements nuclear-capable units must 
meet in order to become or remain nuclear-certified. In addition to the 
periodic inspections, which are conducted by the Service or major 
command, each nuclear-certified unit is also inspected at least once every 
five years by Field Command. Defense Nuclear Agency. This second 
inspection regime was developed to ensure that uniform inspection 
standards are maintained between all Services and major commands. 

(U) Inspections of units for those measures that assure authorized 
use, such as the Emergency Action Procedures that control force execution, 
are not centrally managed. These inspecUons are administered at various 
levels within the Department of Defense and. In many instances, encompass 
component-unique procedures. 

Assistant to the Secretary of Defense for Atomic Energy (U) 

(U) The Assistant to the Secretary of Defense for Atomic Energy is the 
principal assistant to the Secretary for atomic energy matters and. as such, 
has both implementation and oversight responsibilities for nuclear weapons 
safety, survivability, and use control. He is responsible for developing atomic 
energy policies for the Secretary and issuing guidance on his behalf. He also 
evaluates DoD programs for carrying out approved policies and develops 
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systems standards for adn.— n^^^^ Sfp^^a^'in"" 

and reviews. He a foc^ P"^ wLponl ^TNuclear Weapons 
departmental body "sponsible for iwdeY we^^^^ ^ecuUve Secretary and 
'^Slh^s'SJd^g ™t^e ISfsS Its independent oversight of 
Sr wea"&e.y. security, and control. 

Service and CINC Oversight ResponslblliUes TO 

(U, Tlie MiUtary Departments and the nude^ S^'a^'cS" 
with toplementing Departmental P°l'j;f„* *?^^their1Specive areas. 

for ensuring proper toP'^^^'^^^^^aSi^ «Sdslng. and maintaining 
Included m their responsibiUUes are. teaimng. 6 ^^^^^^ 

olUcal NCCS elements to V^o^<^«J^Pf''lJ ™les- orotecUng nuclear 
SdS: implementing safety stand^ds ^d n^^^^ ^^^^g^^^ 

vreapons from damage. that standards and 

stolen, or missing ""^^ *f ^Xdtd m the inspecUons they conduct 
««Su?nTi»3o^^^^^^ 

^?a^l^W' sS,l?r^T!ie^^^^^^ ^^'^ 
Rules. 

(U) INDEPENDENT OVERSIGHT 

,U, ,n addition to the Une --sight resp^^^^^^ 
compor^ents described above, seve^o&er agenc^s a ^^^j^ ^^^^^^ 

conductmg '°'l«P?"i'f„f„tTe?lrtmfn?S Sefense-Department of Energy 
SS.«sK SJJJbord^^^^^^^^^ 

S«e !S"d\?e^n?e?t ^ sight responsibilities of these 
agencies are summarized in Table 8. 

tU) The interdepartmental "^^^^^tf^^^^^ 
contributes to the very complex ^^^f^^ll'^J^'on^^rtSs^^nd 

Decision DirecUve NCCS agencies when 

f^^. es%Van Uie entire NCCS. 

(U, These agencies provide the «s of their 1^^^^^^^^ 

recommendauons for system «"hf>«"^"%J° fSlsl me^^^^^^^ discussed. 
NCCS. A summary of their annual reports, tne laiib." 
and the report recipients is shown in Table a. 
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I Defense Nuclear Agency I 

o Develops and assesses nuclear weapon accident and incident I 

iNudeax Weapons Council 

Considers safety, security, and control measures in both new and | 
SIsTco— llcretaries of Defense and Energy on the 

r^^s'^S^'SFpS ^nuclear weapons research and 

development and oversees the program .y,. Sprrptaries 

Submits the Annual Nuclear Weapons Surety ^^5?^^/° *^^/p^"^^^^^ 
, of Defense and Energy for signatures and forwarding t? the President 
? Summarizes the safety, security, control, and reliability of the 
stockpile for the preceding year 

U.S. Nuclear Conimand and Control System Support Staff 

L Assesses and monitors the NCOS on a continuing basis to ensure aU 

r ^cS c^maSd Sid control processes are integrated through all 

1 environments to: 

I - Assure authorized use j 1. ^ 

I - Assure against unauthorized or inadvertent use 

o Reviews and monitors all NCOS policy guidance 

o Conducts oversight of inspecUons. tests, f^d exercises _ 

0 Provides recommendations and an Annual Report on the status oi uie 

1 NCCS to the Executive Agent 

I UNCLASSIFIED 

^' TABLE 8 



lo 
to 
lo 

0 
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U NCLASSIFIED 
FIGURE 8 
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(U) RISK REDUCTION 

(U) Risk reduction has been broadly defined as that combination of 
confidence-building and predictability "^^^sures tot wouW 
orobabilitv of outbreak of nuclear war as a result of accident, miscaicuiauon. 
SSnrerpJetaUon. terrorism, or unexpected techn^^^^^^^^ 
These measures can be taken unilaterally or "JuMat^aUy. but^^^^^^ 
the existence of these measures are communicated *° JJ'.^X^ 

their effectiveness. In certain cases, tiiey require multilateral participation. 

(U) Many U.S. government actions can be considered to be risk 
reduction measures, depending upon tiie breadth of interpretation applied 
Based on the above defiJiition, all of the failsafe measures dis^^/sed ear^^^ 
this chapter contilbute to risk reduction. The existence and sometimes the 
details of tiie positive measures tiiat assure against unauthorized use ot 
nuclear weapons have been well publicized, in large part to provide all 
nations witii confidence in U.S. ability botii to provide adequate secunty and 
protection to its nuclear weapons and to prevent fatas^ophic consequenw^ 
resulting from an accident or terrorist incident. In addition, the degree of 
readiness and tight contirol implemented by tiiose measures tiiat assure 
autiiorized use have been developed to deter any adversary from eitiier 
miscalculating U.S. resolve and capability to respond to ^ attack or from 
misinterpreting actions taken to change the posture of tiie stockpile. 

Furtiiermore. botii tiie Departments of Defense and Energy conduct 

research and development programs across a broad range of nuclear weapon 
and nuclear command and control issues. 

(U) TRADITIONAL RISK REDUCTION MEASURES 

(U) Historically, risk reduction measures have been defined much 
more narrowly tiian what is implied above. Until very recently, tiiey have 
focused almost exclusively on direct communications between tiie United 
States and tiie former Soviet Union, as a means of avoiding 
misinterpretation of actions and intentions of eitiier side or to avoid 
potentially dangerous confrontations between tiieir forces. A summary of 
existing direct communication and prior notification agreements is 
presented in Table 10. 

(U) To a certain extent, arms control negotiations and treaties have 
also served as risk reduction measures by reducing tiie growtii of and. more 
recentiy. the size and destructive power of each superpower's nuclear 
arsenal. While these measures remain important and have cert^nly 
contributed to the prevention of nuclear war between tiie United States and 
tiie former Soviet Union, tiie changes in tiie international security 
environment discussed in Chapter Two indicate a need for expansion 
beyond this traditional narrow focus. 
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1963 

1971 

1972 

1973 

1987 

1988 

1989 

1989 



Direct Communications Unk ("HotUne Agreements, 
as modified (1971. 1984) 

Accident Measures Agreement, as modified 
(1976. 1977. 1985) 

Incidents At Sea Agreement 

Prevention of Nuclear War Agreement 

Nuclear Risk Reduction Centers 

Ballistic Missile Launch Notification Agreement 

Dangerous MUitary Activities Agreement 

Strategic Exercise Notification Agreement 

UNCLASSIFIED 



TABLE 10 
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CHAPTER FOUR 
FAILSAFB (U) 

(U) BACKGROUND 

(U) The effective safety, security and control of U.S. nuclear weapons 
is the most important goal of the U.S. Nuclear Command and Control 
System. As such, the positive measures which ensure that nuclear weapons 
safety, security, and control are effecUve and that they cont^^J^te t° ™ 
p nnrnpri?^te "as^nrP-asstire ap pinst" balance receive regular and Intense 
scrutiny and high resource priority from all NCCS components. This 
scrutiny is particularly important in the current environment. 




(U) The Advisory Committee also recognizes that nuclear weapons will 
continue to play an important role in this country's deterrence strategy. 
Therefore, the ability to assure the responsive and flexible use of nuclear ^ 
weapons, when authorized by the President, should be maintained while the 
United States pursues fsdlsafe enhancements. 

(U) This chapter focuses on specific failsafe^ issues investigated by the 
Advisory Committee. These issues were selected by the Advisory Committee 
to support a comprehensive, yet focused, assessment of all aspects of 
failsafe. In its investigation, the Advisory Committee thoroughly considered 
aU elements (i.e.. equipment, faciUties, communications, procedures, and 
personnel) of the DoD portion of the I^CCS. Based upon this review, the 
Advisory Committee identified specific issues which were considered to 
merit further detailed investigation. The three major issues addressed In 
this chapter are: 

• (U) Issue 1: What NCCS vulnerabilities exist and what Improvements 
should be implemented to strengthen DoD positive measures to prevent 
accidental. Inadvertent, or unauthorized use while assuring authorized 
use of nuclear weapons? 



1 (U) Failsafe: That combination of safety, security, and control procedures and equipment 
intended to prevent mistaken authorized use. unauthorized use. Inadvertent use. or loss ol 
nuclear weapons or to Interrupt, terminate or mitigate the results of such action should one 
occur. These are unilateral actions that need not/should not be communicated to others to 
be effective. 
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. (U) Issue 2: Should the United States implement a system for po^^^ 
launch destruct for aU nuclear weapons? If so. what types of systems 
should be implemented? What improvements are required/' 

• fU) Issue 3: Are current DoD procedures, equipment, and facilities 
adequate to maintain the required standards of nuclear weapons safety, 
security, and control under the full range of stockpUe conditions? 

(U) Sub-issues are discussed with associated major Issues in 
appropriate sections. 
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ISSUE 1: NCCS VULNERABILITIES (U) 



(U) What NCCS vulnerabiUties exist and what improvements should be 
implemented to strengthen DoD positive measures to prevent 
inadvertent, or xinauthorized use while assuring authorized use of nuclear 
weapons? 

• -fSh Sub-issue 1-1 




• (U) Sub-issue 1-4 (Coded Control Devices on all U.S. nuclear 
weapons): Should the United States implement coded control 
devices on all current and/or future nuclear weapons S3rstems? If 
so. what types of devices and on which weapons systems? 

• -(S)- Sub-Issue 1- 
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(U) METHODOLOGY 

fU) Hie NCCS Assessment Study Group was estabUshed to examine the 
NCOS as it currently exists and as it may evolve by the year 2011. and to 
propose opportunities, where possible, to improve the faJlsale 
dia?acteristics of the system. The Group was also tasked to ensu^^^ 
none of the recommendations it made would negatively affect the abiUty to 
use nuclear weapons in an effective manner, if authorized. This issue was 
particularly difficult in that it dealt with an existing, large, and complex 
system. TTie size and complexity of the NCCS necessitated a formalized 
approach to ensure a thorough and complete examination. 

fU) The first part of this approach was the development of a process 
flow diagram to document the procedures, equipment, and personnel that 
comprise nuclear command and contirol. Development of this diagram was a 
multi-step task including data collection, site visits, review arid editing draft 
diagrams with support from the responsible organizations, and finally, 
synthesis of the diagrams into a complete depiction of the nuclear command 
and control process. 

(U) When the process flow diagram was completed, the full NCCS 
Assessment Study Group systematically examined tiie documented process 
to identify weaknesses, potential failures, and opportunities for 
improvement, either through procedural or technical means. Since Study 
Group membership represented all appropriate NCCS technical specialties, 
agencies, services, and operating autiiorities, tiie expertise necessary for a 
thorough review was present. All data from the process flow diagram were 
converted into a Fault Tree Analysis computer model as an additional 
completeness check and alternative route for identifying areas needing 
improvement. 

(U) Using these techniques, the Study Group determined, and the 
Advisory Committee concurred, tiiat while the NCCS was sound, further 
investigation into eight specific areas, with a view toward making 
improvements, was warranted. 

(U) The Study Group established individual Red Teams to conduct 
each investigation, with the specific charge of taking an aggressor's 
approach to determine if any weaknesses could be identified and potentially 
exploited. Cognizant operating organizations for the areas to be investigated 
were invited to establish Blue Teams to help provide information for the 
investigations and to develop opposing views to the Red Team's findings if 
warranted. The Red Teams developed approaches, visited the appropriate 
sites, and consulted with the Blue Teams. This cycle was repeated as 
necessary. 

(U) Due to the role of coded control devices in assuring control of 
nuclear weapons, this area is also discussed in sub-issue 1-4. 
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(U) BACKGROUND 

(U) This issue reflects the requirement for policies and procedures i 
assure the rapabilltv in all situations to emploY nnnlear weapons as 
^,ithnn?;er1 bv the President while assu ring against their una^tnoflzgd y§g. 




(U) METHODOLOGY 



(U) This issue was Investigated by a review of the publications 
describing this system and discussions with appropriate staff personnel. 
These publications are" appropriately highly classified with limited 
distribution. 
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(U) METHODOLOGY 



(U) The Red Team traveled to Kings Bay Naval Submarine Base. 
Georgia to receive detailed mission briefings and actual crew procedural 
demonstrations by USS PENNSYLVANIA (SSBN 735) crewmen in a 
submarine simulator. Upon the completion of these demonstrations. th< 
Red Team interviewed key members of tiie crew and reviewed the 
oreviously developed process flow diagrams. The Team members also 
toured USS TENNESSEE (SSBN 734) to familiarize tiiemselves with an 
SSBN for the physical configuration and crew positions. 
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(U) RECOMMENDATIONS 

(U) The Advisory Committee recommends the Secretary of Defense: 
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(U) METHODOLOGY 



(U) A Red Team composed of experts from Sandia National 
Laboratories and the National Security Agency was established to investigate 
this issue. 




IV-39 

TOT J3ECRET - FRD • NOFORN W^INTF T, 




IV-40 

■•TOP S ECRET FRD NOFOIl?J ^rNTNT EL 



TOP SECRET • FRD - NOFOIUJ ■ WNINT Etr 




TOP SECRET FRD — NOFORN WNINTFT ^ 




IV-42 

-TQP-SEG RET FRD NOFORJJ WTJINTET* 



TOrSECI t TT FTTP T^TnT?nT?T\T WNINTEL 



ISSUE 2: POST-LAUNCH DESTRUCT DEVICES (U) 

(U) Should the United States implement a system for Post-launch 
destruct for all nuclear weapons? If so. what types of systems should be 
implemented? 

(U) BACKGROUND 

(U) Interest in employing post-launch destruct deuces a means of 
terminatlne an unauthorized or inadvertent launch of a U.S. ballistic missile 
or^aS^eS/^tentional but ill-advised launch in which tiie P^^^ 
reconsiders the original execution order (during the approximately 30 
SS?ute night time for ballistic missiles) has been expressed Pf.f ^icaUy in ^ 
both the open Uteratiire and in the Congress. As a result of tWs interest ttie 
Ad^s^ CoiSmittee was specifically tasked by the Secretary of Defense to 
SSe the desirabiUty and feasibiUty of adding this new type of failsafe 
^^^to^l baUistic aid cruise missiles in the U.S. stockpUe. Upon 
Sderauon of this tasking, and after further specific discussion of the 
Zlnn^cZ^^nc^s of aS inadvertent or unauthorized detonation of any 
Suclei weapon, the Advisory Committee expanded the scope of tWs taslang 
to taclude aU ty^es of nuclei weapons in the current and planned stockpile. 
In order to rescope their tasking, tiie Advisory Committee formulated the 
following issue statement for investigation: 

(U) Should the United States implement a system for post-launch 
destiuct for all nuclear weapons? If so. what types of systems 
should be implemented? What improvements are required? 

(U) METHODOLOGY 

(U) ■ The Advisory Committee conducted a thorough and objective study 
of v^ous posMaunch desti^ct concepts. In addition to tiie taskmgs to and 
support received from its Technology Working Group and Remote Destruct 
Study Group which are discussed below, the Advisory Committee mvited and 
specificaUy considered the inputs from leading civiUan experts from both 
inside and outside the government. The Committee also assessed tiie 
DOtential need for such devices in tiie context of botii the changed 
totemational security environment and its overall investigation of tiie failsafe 
and risk reduction capabilities of tiie current and programmed Nuclear 
Command and Control System. 

(U) To support its fact finding and concept development for the post- 
launch desti^ct investigations, tiie Advisory Committee established the 
Remote Destiiict Study Group, under the direct supervision of the Chairman 
of tiie Technology Working Group. The Remote Destruct Study Group was 
made up of 40 military and civilian representatives from the Office of tiie 
Secretanr of Defense, tiie Joint Staff, staffs of tiie nuclear Commanders in 
Chief, tiie Services, the National Security Agency, the Department ot 
Energy's National Laboratories, and other Depart:ment of Defense Agencies. 
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Members were prlmarUy fleld grade military ofilcera and ^^^^ 

T^^,^X.^"^^'^rt^'^^- were also 
consulted on an as-needed basis. 

(U) At the Advisory Committee's dlrecUon. the Stu^f Group co^^^^^^ 
a thr'elp.^sed study («»-*i,?XuK*bS» ™St^^^^^ 

receive further guidance. 

proviZ vt^^^^^^^^^^r^^S^rL 

^-^sfortraM^ltT^^S^^^ 

CoSi^ttir^ter review and discussion, approved these critena. 

fUl The Study Group received oVer 150 briefings at more thsn 16 
senaSte DoD and DOE sites on technologies and weapons ope^fUons and 
nnS^rted an tensive Uterature search of over 100 (classified and open) 
soS^ces iSdy group determined from, this effort that a post-launch 
de^ct svstem must fuUUl five basic functions: detect the launch of a 
n?c^ wSpon; assess the errant nature of the launch: communicate that 
aSel^Int to decision-makers and issue a remote destruct command to 
weapon ^ it?l^^^^ sequence or in flight: preclude a nuclear detonation 
Sd/C? terminate flight: and confirm destruction of the weapon. 

(U) Five "types- of remote destruct options, discussed below emerged 
in the course of ^search: passive, active enable active ^^sti-uct bi n^^^^ 
Sid open source. Concepts of operations were ^^^^ ^e^^^^^ 
option A description of tiiese concepts, along witii ^J^^^^^f^^^?^^^ 
questions were forwarded to tiie organizations supporting the S^^^^^^ 
Ld these agencies provided detailed analysis of options to include concept 
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implementation; evaluation criteria; engineenng-bas^ 
cycle cost, schedule, and technical risk; nuclear ^afetyand secui^^^^ 
considerations; and mission and operational impact. -Hie Study Group men 
used these analyses to refine the options. 

(U) With the five options fully developed, the Study Group^^^^^ 
five corresponding subgroups, with members of the Study froup cadre 

-»one«sSSt^^^ FSSr 

SsSS (nuclear and environmental); vulnerabiUties; P'^oJf ted develop^^^^ 
Sie ailS technical risk; projected development, productio^^^^ 
costs; impact on weapon system and mission f apabiUty^oUtical^a^^^ 
ooerational impact; iid termination and recall considerations. The 
Sti?n S urlderwent independent comprehensive revi^s by 
Studv GrouD and Red Team to ensure completeness and validity, wiUi the 
fiS results f^arded for review to tiie Technology Working Group and 
feen to Sie Ad^Tsory Committee to support its research and deUberations. 

fUl The Advisory Committee concurrentiy solicited additional 
infoiSktionLd concepts, receiving a number of briefijigs from no^^^^^ 
exnerts on conceptual post-launch destruct systems and how tiiey might be 
SSfl^ented mW^^ experts also presented tiieir views on the 

^?clivef requi^^^ for such a system, potential failsafe enh^ents 
molded how it might contiibute to risk reduction and increased 
Sit^Itionrconfidlnce in tiie contirol of U.S. nuclear weapons, and how it 
SigS beXred with other nations and deployed in lieu of expensive and 
Dotentially destabilizing defensive systems. During the course of its 
deUberS^^ns! tiie Adviiory Committee also solicited tiie post-launch 
dStiSrt ^ews of otiier non-government individuals who appeared before 
^1 ComiSttee on otiier subjects. These included noted «^Pef 
Seas of nuclear weapons safety, arms contirol. and risk reduction. These 
Sp?ts were dil^^^^ during the Committee's deliberations and are 
summarized in a section below on post-launch destinact pros and cons. 

(U) As was tiie case in all areas of its review, tiie Advisory Committee 
did not consider tiie desirability or feasibility of P^st-launch destruct 
svstems in isolation from eitiier world events or its otiier findings. Botii tiie 
need for and tiie Ukely acceptability of post-launch destinict systems, as an 
additional risk reduction measure in tiie changed mternational secx^^^^ 
environment were addressed. It also considered its fi^^rngs. including 
potential enhancements identified in tiie course of this rexaew. relative to 
tiie effectiveness of tiie current and programmed NCCS and its capability to 
assure against unautiiorized or inadvertent launches or detonations of U.S. 
nuclear weapons. At tiie same time, tiie Committee remained keenly aware 
of tiie continuing role of nuclear weapons in United States deterrence 
stirategy and tiie need to assure tiie responsive use of nuclear weapons when 
authorized by the President. 
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(U) OBSERVATIONS AND ASSESSMENTS 

Post-Launch Destruct Concepts (U) 

(Ul The Advisory Committee determined that the ^^^ff^f^^l^^f^^^^^ 
active (which require external actions after launch). 

flight or to disable the weapon. 

(U) The Advisory Committee considered four active post-launch 

destruct concepts: 

. (U) Artive Enable . Active Enablement systemsare also designed 
to be f ^safe andare similar to Passive systems. Tliese systems 
require 4 enS^^^^ code received after launch or release from 
the aoDronnate higher authority which turns off tiie destruct 
?e^cL SdTiows the autiiorized arming and fuzing sequences to 
ocSir lirtiirenablement code is hbt received within a preset time 
interval, the weapon system is automatically destroyed. 

. (U) Active Destruct . Active Destiruct systems ff^J^ire remote 
detection and assessment of all unautiiorized missile launches by an 
aDoroDriate higher authority who transmits a secure destruct 

to eker the on-board devices or to >^eaPons systems able 
to intercept and destroy the missile. Unauthorized launch 
SaSStters would be added to all nuclear cmise r^^^^^^^^^^ provide 
a global detection capability. As a subset of tiiis concept, tiie 
Advisory Committee specifically investigated potential adaptation of 
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current missile destruct systems used to ensure range safety during 
peacetime missile test flights. 

. (U) Binational. These concepts are risk reducUon ™ 

are similar to Active Destruct. TJ^^V J^^^l'^^^^f^^^^^ed^^^^^^^ 

detection and assessment capability for all "'^a^^Py^^f ^J^^^^nsmit 

faunches by multiple national authorities any of whic^^^ 

a Destinct Command. The destruct system c^Jjf .^^^Jfeof 

onboard or employ national systems to provide an intercept 

capability. 

• m\ Onpn Source The Advisory Committee met with non- 
goleLSnSuL who ha^proposed botii pass^^^ -dactxve 
lost-launch destinict ballistic and cruise missile concepts Uie 
SSlic media The Committee compared these concepts, retaining 
S^se^eas described by the authors that differ from the concepts as 
described above. 
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Impacts of Technology and the Changed Security Environment 



(U) 



(U) Along with due consideration of the information and opinions 
provided on the desirability and feasibility of a post-launch destruct system, 
the Advisory Committee considered the impacts of technological advances 
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(U) RECOMMENDATIONS 

(tJ) The Advisory Committee recommends the Secretary of Defense: 
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ISSUES: SAFETY AND SECURITY (U) 

(U) Are current DoD procedures, equipment ^^J^^^^fLJ^'S" '° 
maln^ Sfe required standards of nuclear >^eapo^^^^^^^ security, and 
conSol under the full range of stockpile conditions? 

. fUl Sub.issue3-1 (Personnel ReUability): What enhancements 
shSSd be made to tie DOD Persomiel Reliability Program to provide the 
required level of protection to nuclear weapons? 

. (U) Sub-issue 3-2 (Nuclear Weapons Physical Sec^^^^ 
security standards and procedures adequate to protect nuclear 
weapons, both in storage and in tiransit? 

- c',iv».i«s«iiie 3-3 (Comouter and Information Security): Are 
compute ^"Jrfo^aKcurlty adequately m^^med In Ught of the 
evolving tiireat? What enhancements should be made 

• nn Sub-issue 3-4 (Delay Against Unauthorized Use): What means of 
prSSction cl^Trevent unau^^^ use of a nuclear weapon if physical 
control is lost to an adversary? 

• ai\ Sub-issue 3-5 (Recapture and Recovery): What improvements 
^hS^ d be made to e^hL^^ protection aga^st detonation of a nuclear 
weapon in the event that all other layers of protection fail and an 
adversary gains physical contirol of a weapon? 

(U) BACKGROUND 

(Ul The overall system of maintaining the required standards of safety. 
secuSir.^d "l!s impressive. Its success in preventing unautiionzed 
or iSad^eSnt use is based upon a multi-layered apPfoach which is 
discussed in detail in Chapter Three. This approach recognizes that while 
£e mStenancrof actual physical control of a weapon in a safe envu-onment 
1^ pSlSSinT no Single factor can be made perfect under every condition. 

(U) Even before tiie initiation of tiie FAPR, the DoD. in concert with 
tiie DOE S Appropriate, had taken effective actions to ^esp°nd to prej^^^^^ 
Sgh level panels tii the areas of safety, security and contirol. J^ff Ij^g . 
with Its Charter the Advisory Committee's review emphasized security and 
Sntrol S^ty IsSfes were p^^^^^ by the Advisory Committee but only 
as they related to the assnre-ass iirp ajjainst balance. 

(U) These initiatives noted above, the President's Nuclear Initiatives, 
and other DoD and DOE long-term efforts (e.g.. intiroduction of newer and 
SLre secure systems, backfit of more effective weapons to curr^^^^^^ 
are making tiie U.S. nuclear stockpile safer and "^o'^f s«^ure. V^^^^^^ 
precise numbers of tiie U.S. nuclear weapons arsenal are changing in tiiis 
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fluid security environment. Table 5 describes the essential composition and 
dSS:tion of the arsenal in the future. Also, corrective actions have been 
Sed to aSdrYss deficiencies noted during the FARR rejdew ne^ 
effect of tiiese initiatives is the continuing strengthening of the individual 
layers of security and control. 

(U) The Advisory Committee recognizes that the current system of 
safety, security, and control was developed to optimize tirade-offs between 
reUabUlty vs. system complexity, readiness vs. contirol. weight vs. yield, etc. 
in relation to the then current threat and security environment, m 
response to tiie new environment, the U.S; Is considering options to 
readdress the balance between tiiese often competing goals. As part of this 
emphasis, continuing "Red Team" assessments are critical to identifying 
vulnerabiUties reflecting current and evolving tiireats and to malntalnmg 
operational capabiUties. One factor that should be kept in perspective is 
that with the shift in force posture and focus, continuing emphasis on the 
entire system of command, control and communications; training; 
exercises; and readiness is necessary to ensure that the weapons could be 
redeployed in a crisis or in response to changing U.S. security 
requirements. 



tU) METHODOLOGY 

(U) The Advisory Committee established the Weapons System Review 
Study Group consisting of 32 members from 17 organizations deeply 
Involved in all aspects of nuclear command and control. The Study Group 
was organized into three initial review groups to optimize use of the 
assembled expertise. Some Study Group members served on more than one 
review group because of their unique experience and talents. 

• (U) Unauthorized Launch - The first group examined the 
potential for Unauthorized Launch Analysis program enhancements 
by (1) reviewing existing Unauthorized Launch Analysis 
assumptions, criteria, methodologies, and results for adequacy, 
compatibility with postulated threats, and detail; and (2) surveying 
typical sites and operations for weapon systems of concern. In 
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some cases, weapon system trainers were visited In conjunction 
with site and ship visits. 

• fU) Tn.HvPTtPnt T.aunch - The second group ^;y^®*i^^if^^*S,n„re 
adequacy of another nuclear safety analyses by tlJf^^^r^/J^^"" 
modes aiid effects, and inadvertent launch aj^d other anaJyses for 
adequacy. compatibiUty with postulated accident conditi^^^^ 
spe?ific^. and results; and (2) surveying typica^ sites a^d 

ODcrations for weapon systems of concern. The group also 

Sated the efflclcy of the overall nuclear weapons safety program 
process. ( 

. (Ul Securitv - This group determined the potential for security 
prSraiSSfcementsV Reviewing (1) aU weapon sto^^^^^^ 
qite Securitv Folders. (2) waivers, exceptions, and variances and 
fr^?pe^tioT7esX (3) cirrent issues rW to security for«^^ (4) 
current security research and development programs, and (5) 
?S storage^d fansshipment sites and security operations, 
^ditionally. security concerns were solicited from site security 
forces. 

(U) Detailed briefings were, received in appropriate areas. 

(U) The review groups identified potential areas of concern and a 
seven-member Red Tiam was formed. The Group correlated weapon 
Ivstem design features, common functions (movement, maintenance. 
tiinSg etc^)! Sid weapon stockpile-to-target sequences to Identify 
potential problem areas. 

m\ Areas of concern were solicited from knowledgeable persons 
tiiroi^ vitfte to 34 commands and organizations, including tiiose witiiin tiie 
DOE nuclear weapons complex. 

(U) Findings from tiie 1984-86 ^oint Chiefs of Staff Nuclear Com^^ 
and Conti-ol Study relating directiy to nuclear weapons and tiieir facilities 
wre renewed ag^st tiie backdrop of today's fluid security environment. 

(U) All review groups correlated data aiid potential issues and 
enhancements were identified for consideration by tiie core Study Group. 

(U) The Study Group's core group evaluated Issues to identify 
recommendations to tiie Advisory Committee and tiiose which amov^^^^^^^ to 
minor program enhancements. (These latter items were the subject of 
separate correspondence from tiie Study Group chainnan to appropriate 
cogSzant offices). Potential issues were reviewed witii Red Team members. 

(U) The Study Group chairman periodicalfy briefed the Ad%^sonr 
Cormnittee on evolving issues and intermediate ^^dlngs of its re^^^ 
received guidance from tiie Committee. In all cases, members of ttie Study 
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Group were encouraged to make any minority or dissenting opinions known 
to the Advisory Committee. 

(U) Based upon Its review of s^l.ty. s^c^t^„<^^'^;^l^'^ 



ComnitteeTd^nSfl^ five sub-issues as meriting further detailed review. 
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SUB-ISSUE 3-1: PERSONNEL RELIABILITY 

(U) What enhancements should be made to DoD Personn^^ 



fU) What ennancements snuuiu lux^v.^ T ZJZ.^ir.r^ tn nuclear 
ReUability Program to provide the required level of protection to nuclear 

weapons? 

CU) BACKGROUND 

or i^ve^errofdSK^^ 

to Pr^^^^^ L loss, iheft, sabotage, unauthorized use. accidental 
damage, or destruction of a nuclear weapon. 

(U) The significance and importance of the Personnel Reliability 
Program wiS continue to increase in the future. Critical information 
Von^eTTo beXeminated, computer hackers wUl become mor^ capable 
andeconomic pressures become greater. As a result, demands on 
personnel will increase. 

(U) METHODOLOGY 

fUl MulUole facets of personnel security in the nuclear command and 
contrd system were examined by the Weapon Syft^J^^ Revie^^^^^^ 
with special emphasis on: methods to ^n^^f-^^ ^^^^/^^ ^^^^ 
personnel and the potential role of polygraphs in the PRP. 

(U)' The methodology used to review procedures for determining and 
ensuring personnel reliabiUty included: 

. (U) A thorough review of all national and DoD-level personnel 
reliability guidance. 

• (U) Discussions with appropriate officials to determine (1) 
ImpUcations of eliminating questions on arrest history, credit 
history, drug/alcohol use and mental health and organizational 
affiliations, and (2) possible alternative niethods of determining the 
fideUty of personnel in critical nuclear command and control 
positions. 

• (U) Review of recommendations to the DoD office witii 
responsibility for personnel reliability on the incorporation of 
polygraph testing for PRP personnel. Validity of the observations 
Ld recommendltions were coordinated with the Director of the 
Defense Polygraph Institute. Furtiier, current and former 

lV-56 

— TOP S ECRET FRD — NOFORN WNINTKL * 



TOP SECRET ■ FRD NOFORN WNINTEL 

personnel managers were questioned" on their views of the role of 
polygraph testing. 

CU) OBSERVATIONS AND ASSESSMENTS 

fU) The PRP is appUcable only to DoD miUtary. civilian, and in 

rieSed authenticators: In all cases, PRP personnel must be U.S. citizens 
or U.S. nationals. 

fU) The PRP system includes "critical" and "controlled" bUlete with 

the svstem. In addition to tiiese two types of billets, requirements are 
SfpWKhS for soeciallv designated billets whose holders undergo 
iSaordl^a^ r^^^^^ (i.e. counter-intelligence scope polygraph). 

(U) While adherence to PRP administrative procedures may be waived 
during wartime, particularly in a combat theater, the philosophy and 
nrartical reauirements of the PRP continuously remain In effect. 
Cor^^derTmu^^^^^^ to apply their best professional Judgement ^d 
sel^Slly me most trusted individuals to perform nuclear weapon duties. 

m\ A wide ranee of nuclear command and conti-ol positions (Table 13) 
.r.rr.^\.r.AeT^e^^d^tTe are approximately 58.000 DoD personnel 
iSelh^t^, r^88 DOD cl^Sn. 144 civfilan contractors) In tiie 
Irntfrtm AUdandldates for the program undergo Initial screening to 
detfSSie ^m^tency stability Ld dependability prior to assuming their 
n?clS^ coS^^id Scon^^^ Screening includes a 

personal'seclSSTlnv meW evaluation re^^^^ 

records and a personal interview. Upon certification. PRP personnel are 
sSSected to a cSntoual evaluation process, both on and off duty, to assure 
Serability fo perform their PRP duties. Decertification (temporary or 
Smiienti from tiiese duties is required whenever an individual falls to 
me^Siity^tandards. Decertification can result from alcohol or drug 
abuse, conviction of a serious offense, physical or mental condition, poor 
attitude, or a lack of motivation. 

(U) In 1991. less than 3% of aU PRP personnel were permanently 
' removed from iieir nuclear weapons duties. Since 1984. tills percentage 
has declined from a high of about 5%. 

(U) Four important changes have affected tiie PRP In ^e last several 
years. First, tiie DoD has developed a better appreciation of tiie tiireats to 
tiie NCCS. This appreciation is derived from lessons learned in recent 
espionage/insider cases and tiie threat posed by tiie Increasing 
sophistication of computer hackers. 

IV-57 

TOP SECRET FRD NOFORJ? X ^ H ^ JTNTF T, 



EXAMPLES OF PRP POSTTIONS* fUl 



• Cbmmanders; delivery unit I 

• Pilots and crew; delivery aircraft | 

• Delivery unit personnel and supervisors (who. by the nature of their I 
assigned duties - weapons handling, transporting or launching -- could 
cause the unauthorized launch, release or firing of a nuclear weapon) 

U Commanders, personnel and supervisors; nuclear support units (e.g.. I 
maintenance, retrofits, Umited life component changes) I 

I • Persormel in the conmiand and control line I 

I - Control or use authenticators and EAMs I 

I - PAL teams and management personnel I 

- Staff officers who could direct the employment of nuclear weapons I 

- Personnel who control or use nuclear missile targeting tapes I 

I • Nuclear weapon handling and transport personnel I 

I - Transport aircraft and vehicle crew and operators I 
I - Crane operators I 
I - Storage and supply clerks I 

I • Explosive Ordnance Disposal persormel I 

I • Nuclear weapons security guards 

I • Weapons delivery system maintenance personnel and supervisors 
I* Inspectors 

|» Custodial imit persormel 

I • Conmiunications security persormel (who receive, maintain and 1 
distribute sealed authenticators. PAL material, or related codes) 

I *PRP positions are "critical" or "controlled", depending on the degree of 
access to nuclear systems and related equipment and technical knowledge. 

UNCLASSIFIED 

Table 13 
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recognizes the extraordinary sensiUvlty /elected yeci^ nu^^^ 
comSiand and control positions (discussed be ow) and P^fJ^fJ^Ji^^^ 
toSence scope polygraph examinations. Also, pending litigation has 
SnfiTd tlie tot^sl^nes^ of background investigation questions on 
ceSeliSior^ factors such as arrests drug and alcohol ab^^^^^ m«ita^ 

hampered. 

im Third the massive downsizing of the U.S. nuclear arsenal has 
impr^ed^'lrTplementation. The retrogade of Ar^V^-^p^^^^ ^^^,3, 
overseas and other force adjustments anticipating the Rresiaent s ^^^cxear 
?nitiXs^d SSs control agreements have reduced ttie number of people 
iS me PW> from about 76.600 in .1989 to 67.000 in 1990 to 58.000 in 
1991. 

(U) Finally, at the same time the program is shrlnldng^ew DoD 

toe dSection of the Assistant Secretary of Defense (Command. Control. 

Communications and Intelligence), include: 

. (U) Institution of additional reUabiUty tests (i.e.. counter- 
intelligence scope polygraph) for selected personnel ftl^^^^^ 
"specially designated nuclear command and contiol positions . 
These positions include, but are not necessarily l«nited to. 
personnel witii access to the nuclear command and control coding 
and authentication processes and a communications medium 
necessary to tiransmit release, execution, or termination orders, 
personnel involved in tiie preparation and production of nuclear 
Command and conti-ol coding and authentication documents and 
equipment; personnel involved in preparation and production^^^ 
nuclear weapons targeting tapes and matenaJs; and maintenance 
and security personnel who could have an adverse impact on 
Astern ^rfoSnance for nodes and equipment tiiat represent near- 
stogle-point-failure elements for tiie nuclear command and control 
system. 

. (U) More restrictive pre-service and in-service dn^^^^^ 
abuse disqualifying standards (e.g.. anabolic steroid^^^^^^^^^^ any 
hallucinogen use. Ind alcohol abuse rehabilitation failure). 
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• (U) Development of a formal training course for installation PRP 
administrators. 

• (U) Development of PRP procedures during transiUon-to-war 
and wartime. 

• (U) Development of a PRP management information system. 

CU) CONCLUSIONS 

fU) People compose the most important layer in the system of positive 
measures Efforts to deploy, protect and operate nuclear weapons systems 
STd^entJr^d ultim^ateV depend on the loyalty ^eUablHty ^d ca^^^^ 
of NCOS personnel. The Advisory Committee concludes that sophisticated 
technological safeguards, while important and necessary, cannot substitute 
for attention to effective personnel reliabiUty. training, f excise, ^d 
inspection programs. The DoD's careful attention to selecting the most 
capable and loyal personnel to conduct nuclear weapons-related activities 
and its attentive i^iplementation of programs to monitor their reliability will 
continue to be essential in maintaining the Departments record of effective 
nuclear security and control. 

(U) RECOMMENDATIONS 

(U) The Advisory Committee recommends the Secretary of Defense: 

• CU) Maintain strong continuing commitment to the highest 
personnel reliabiUty standards. Spedfically maintain a vigorous 
Personnel Reliability Program (PRP) for DoD and conU-actor 
personnel involved in all aspects of nuclear comniand and control 
' (weapons handling, maintenance and transportation, sqflware 
read/write access, control/access to nuclear command and control 
code material, etc.), 

•• (U) Continue vigorous opposition to current legal 
challenges to certain background questions on DD Form 398 
(DoD Personnel Security Questionnaire 0I/SBI)} and DD Form 
398-2 {DoD Personnel Security Questionnaire (p^ational Agency 
Check)} for those personnel assigned nuclear command and 
control responsibilities. Current and pending lawsuits, \f 
litigated successfully against the DoD, would prohibit the use qf 
behavioral inquiry in the consideration of personnel for 
security clearances to sensitive nuclear command and control 
responsibilities. 

•• (U) Emphasize the equal importance of initial investigation 
and reinvestigation in both the selection and the retention of 
personnel with NCCS responsibilities. 
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• (U) For personnel assigned to the NCCS, ensure ettery 
appropriate precaution is taken to enhance personnel reli(a)iUty. m 
accordance with national guidance, administer random ana 
aperiodic counter-intelligence scope polygraph «f«7""*t5!S?f 
Siosc individuals who are a^gned to 'Sspecially designated nuclear 
commcuid and control positions," 
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(U) SUB-ISSUE 3-3: COMPUTER AND INFORMATION SECURITY 

(U) Are computer and information security adequately maintained In 
light of the evolving threat? What enhancements should be made? 




(U) METHODOLOGY 

(U) Personnel from both the NCOS Assessment Study Group and the 
Weapons System Review Study Group conducted site visits and detailed 
research and analyses of NCOS facilities using automated systems. 
Additionally, discussion papers on specific points were prepared by both the 
staff and supporting agencies and provided to the Advisory Committee. 
Outside experts also briefed the Advisory Committee on appropriate aspects. 
The Advisory Committee specifically directed detailed investigation of: 
potential vulnerabilities of automated nuclear command and control systems, 
both to computer "hackers" and to insiders circumventing procedural 
controls" intent on modifying NCCS software; vulnerabilities to a wide range 
of physical attacks or natural disasters: and potential vulnerabilities caused 
by inadequate control over various phases of automated system hardware, 
software or firmware development or acquisition. 

(U) The NCCS Assessment Study Group assigned a Red Team to 
investigate whether insiders or outside hackers, circumventing procedural 
controls by modifying NCCS software, could cause an unauthorized launch or 
release of nuclear weapons. The Red Team reviewed the process flow 
diagrams to identify all command, control and communications systems that 
are used to prepare, inject, relay, or receive EAMs. The Team visited 
representative sites to examine physical security and software procedures 
and to determine the degree of difficulty involved in gaining access to key 
EAM handling systems. Independent of the Study Group efforts, the 
Advisory Committee asked the National Security Agency to assess the 
security of computer systems used in nuclear weapon systems and the 
nuclear command and control communications system. 
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(U) Additional briefings were received on results and methodology 
used for adversarial analyses of software in the TOMAHAWK cruise missile 
and ICBMs. 



(U) Assessment of this issue was also supported by the NCCS 
Assessment Study Group's investigation of the possibiUty of false attack 
warning due either to insiders or hackers. The observations, conclusions 
and recommendations pertaining to that issue are discussed in an earlier 
section. However, many points germane to the overall issue of information 
security were noted during this investigation and are discussed in this 
section. 
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(U) SUB-ISSUE 3-4: DELAY AGAINST UNAUTHORIZED USB 

(U) What means of protecUon can prevent unauthorized use of a 
nuclear weapon if physical control is lost to an adversary? 

(U) BACKGROUND 

(U) The overall system of maintaining the required standards of safety, 
security and control to prevent unauthorized or inadvertent use is based 
upon a mulU-layered approach as discussed in Chapter Three (Figure 4). 
This series of mutually reinforcing safeguards and positive measures 
addresses all aspects of the weapon life-cycle to include: personnel 
reliability; physical security; weapon design (including use control devices, 
safety advances, and environmental sensing devices); procedures; and 
recapture/recovery if control is lost. This approach recognizes that while 
the maintenance of actual physical control of a weapon in a safe environment 
is paramount, no single factor can be made perfect under every condition. 
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CHAPTER FIVE 

NUCLEAR COMMAND AND CONTROL SYSTEM OVERSIGHT 

AND POLICY (U) 



(U) ISSUES 



(U) 
were: 



Among the specific issues considered by the Advisory Committee 

. tU) What measures should be taken to improve oversight of the 
Nuclear Command and Control System (NCCS)? 
. OJ) Should the DoD develop a consolidated positive measures 
policy that addresses all nuclear weapons safety, security, and 
?onS)l requirements (including positive control de^^ces. materials 
^d procedures) to increase confidence in our abfii^ to preverrt 
unauthorized or inadvertent use of nuclear weapons? If so. what 
should be included in this policy? 

(U) BACKGROUND 

(U) Effective and demanding oversight of all aspects of the^ NCCS is an 
essential Sement of the system |r a safe and ^^JiaW^^^i^^^^^ 
force. Due to the complexity and scope of the NCCS, this over^ght ^siem 
i?sS is very complex, ^ih responsibilities assigned to many offices and 
organizations. 

(U) NCCS oversight is conducted at all echelons within DoD and is 
characterized by two types of oversight. 

. fU) Line Oversight: Directive authority to review, monitor and/or 
assess NCCS elements by agents who are assigned primary line 
responsibfiities within the area of concern. 

. (U) Independent Oversight: Directive autiiority to review, monitor 
and/or assess NCCS elements by agents who have no pnmary line 
responsibility within the area of concern. 

(U) The Advisory Committee examined tiiis issue to determine if the 
oversight stiiicture and mechanisms are overly complex, to determme if 
?oSstency m the application of standards and requirements is being 
mSned to detemlne if tiie oversight system can respond effectively to 
Se^haSling environment, and to evaluate tiie effectiveness of follow-up on 
oversight comments and results. 
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(U) METHODOLOGY 

(U) The Advisory Committee's review of NCOS oversight focused on a 
detailed and thorough evaluation of the stnicture organization a^^^ 
effectiveness of the organizations and agencies v^thin DoD ^^f 
responsibiUties. The initial assessment was conducted by the U.S. Nuclear 
Co^and and Control System Support Staff and included ^ complete 
examination of governing documentation, discussions ^jth oversight stafts. 
agencies and commands, and the development of descriptive diagrams 
which illustrate oversight mechanisms. A formal brienng w^ developed and 
presented to the Advisory Committee. Following the briefing and extended 
discussions, key Judgments and recommendations were developed. 

(U) Additionally, the PoUcy and Requirements Study Group examined 
oversight. This study group was chaired by the Director of Sti-ategic Forces 
Policy: from the Office of the Assistant Secretary of Defense for International 
Securitv PoUcy. The group included representatives from the National 
Security Council, appropriate offices of the Secretary of Defense, responsible 
defense agencies, the Joint Staff, and the Services. It conducted an 
extensive review of U.S. policy documents pertinent to nuclear failsafe and 
risk reduction. The Study Group identified criteria for the document 
review, developed review checklists to provide uniform assessments, and 
reported review results. 

(U) ThjB review included: 

• (U) 28 pertinent arms control and disarmament agreements. 

• (U) 31 national policy document (National Security Decision 
Directives and National Security Directives) 

• (U) 18 DoD directives and instructions 

• (U) The Policy Guidance for the Employment of Nuclear 
Weapons (NUWEP) 

• (U) The FY 1992-1997 Defense Planning Guidance (DPG) 

• (U) 12 Joint Staff Publications 

(U) The Advisory Committee also investigated whether a need existed 
for the development of a consolidated positive measures policy tiiat 
addresses all aspects and requirements of nuclear weapons safety, security, 
and control in a single document. The Policy and Requirements Study 
Group was assigned to examine this issue. 

(U) In response to a specific request from the Advisory Committee, an 
additional review examined DoD nuclear weapons safety and security policy 
and the adequacy of its implementation in the Services and NATO. 
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(U) The Policy and Requirements Study Group coordinated with the 
other Working and Study Groups to assess their proposals and to provide 
recommendations on potential policy implications. The Group also 
examined the specific issues associated with a proposed comprehensive 
positive measures policy, enhanced extemal control over naval weapons* a 
post-launch destruct system for nuclear weapon systems, and the peacetime 
readiness posture of ballistic missiles. These reviews consisted of a series of 
meetings and discussions centering on the policy ramifications of each of 
these proposals. Alternative approaches were considered and 
recommendations were briefed to the Advisory Committee. 

(U) As a part of the oversight review, the Weapons Systems Review 
Study Group specifically examined the management structure within DoD for 
the conduct of nuclear weapons systems Unauthorized Launch Analyses. 
Briefings were received on Unauthorized Launch Analysis methodologies 
used for various weapons systems, the methodology to determine the 
adequacy of security at all Army nuclear weapon storage sites, and on various 
adversarial analyses. The Group compared observations and data from the 
preceding with DoD standards and criteria, to determine if gaps or 
deficiencies existed. The group formulated draft recommendations and the 
proposed summary and recommendations were reviewed for factual 
correctness by organizations having related program responsibilities. 




V-3 



TOP SECRET ■ FRD ■ PJOFORJJ ^ i VT^INTEL 



■ TOP SECRET ■ FRD - NOFORW WWDfTEfc 




V-4 



TOr OECRET> FRD ■ NOFORN ■ WNINTEL 




V-6 

TOP SECRTT ' rnp ' NOrORJf ■ WT»NTEL 



TOP DEcnET ■ rnp NO l ^OIU? Wr m JT FT r 





V-8 .. 

TOP CECRET ■ FRD ■ NOFORTJ ■ WTilNTEL 



TOP SECRET — FRD ■ MOFORJJ ' WNINTEL 



CHAPTER SIX 
RISK REDUCTION (U) 

(U) The Advisory Committee considered two broad issues in its risk 
reduction^ deliberations: 

• (U) What confidence-building and predictabiUty measures 
(including sharing of appropriate technologies, systems, 
information and procedures) should be implemented to reduce the 
risk of nuclear hostilities with any power? 

• (U) Given the dramatically altered world situation and changing 
strategic threat, what measures should be taken to improve U.S. 
intelUgence collection and analysis such that information on 
nuclear weapons and devices is provided with sufficient accuracy 
and timeUness to enhance the full range of risk reduction 
measures? Additionally, what measures should be taken to refocus 
and integrate the efforts of all organizations responsible for both 
strategic and tactical warning and the tracking and control of 
proliferation of nuclear weapons, other weapons of mass 
destruction, and advanced weapons technology? 

(U) BACKGROUND 

(U) Risk Reduction measures are applicable to tiie prevention of 
nuclear hostilities, no matter how these hostilities might be initiated: 
whether by accident, as an unauthorized act. or as a deUberate attack by a 
national or sub-national entity. These measures have traditionally been 
implemented in two forms. The first is direct communications Unks and 
associated procedures derived through formal agreements between 
governments to avoid misinterpretation of intentions or actions and to avoid 
potentially dangerous confrontations between forces. The second is through 
arms control negotiations and featies to limit or prescribe certain behaviors 
and reduce the size, destructive power, and proUferation of nuclear arsenals. 
The historical focus of these measures has been., to reduce tiie risks of 
nuclear war between the superpowers and many such agreements and 
treaties are in effect 



(G/WTJ/JJF) 




1(U) Risk Reduction: That combination of conndence-buUdlng and predlctabmty measures 
that would reduce the probability of outbreak of nuclear war as a result of ^j^J^^^- 
miscalculation, misinterpretation, terrorism, or unexpected technological breakthrough 
•niese measures can be tWn unilaterally or multilaterally. but in all cases the existence of 
these measures are commuhlcated with others to ensure their effectiveness. In certain cases, 
they require multilateral participation. 
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JTTED STATF.«^.SUPPORTED RISK RRnTTCTION ACTIVITIES" 



{Middle East: 

- Middle East peace process , , „ . v 

- Arms Control and Regional Security Working Group (with Russia) 
IsraeU proposal for "hotline" with Syria and advanced notification ot 
military maneuvers ^ , 4. 
Initiative on non-proUferation and arms transfer restraint 

-- Arms registry 

|- RepubUc of Korea/Democratic People's RepubUc of Korea 
denuclearization declaration 

Joint Nuclear Contirol Commission, inspection regime 
Proposed South Asian non-proliferation conference (with Pakistan, India. 

I China, and Russia) ..1. n 1 , 

- Indian interest in Incidents at Sea Agreement witii Pakistan 
I- Indo-Pakistani Agreement on protection of and exchange of data on 

nuclear facilities ...ft^^*, « 

Indo-Pakistani senior military "hotiine" and exercise notifications 

1 Latin America: , 

United States-Brazilian Resolution on hemispheric security and arms 
control (to the Organization of American States) 
Treaty of Tlatelolco nuclear free zone (less Cuba) 
I- Argentine-BrazU-Chile Agreement to ban biological and chemical weapons 

- Argentine-Brazilian Accounting and Contirol Committee Agreement on i 
nuclear safeguards (with the International Atomic Energy Agency) 

'X?pen Skies" Treaty (overflight regime) and extension to States of the 
former Soviet Union 
North Atiantic Cooperation Council 

NATO Permanent Representatives meeting on crisis management 
Conference on Security and Cooperation in Europe 
~ Conflict Prevention Center 
— Communications Network 
llntexnational: 

- Nuclear Non-Proliferation Treaty 
Missile Technology Control Regime 

— International Atomic Energy Agency Safeguards * r 

- United Nations' 'Transparency in Armaments" Resolution. Arms TYansier 
Register 

- Workshop on Arms Transparency 

- United Nations' study, confidence-building measures in space 

- Negotiations on global chemical weapon ban 

UNCLASSIFIED 
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• (U) Expand appropnate bilateral and regiormlinfj^^ 
exchange and risk reduction measures with nations in areas of 
greatest proliferation concern, 

• CO) Establish multilateral agreements for consultation in the 
event of a nuclear weapons incident. These measures would rely on 
timely and assured communications. 




• (U) Establish crisis communications capabilities among 
appropriate nations of a regjion. 

• (U) Transfer and/or exchange, in appropriate cases, nuclear 
weapon safety technology; physical security technologies, 
techniques, and concepts; and use control/denial concepts (with 
certain restrictions) to selected nations (consistent with the 
provisions of the Nuclear Non-Proliferation Treaty and other 
proliferation control agreements), to reduce the risks of an ^ 
accidental or inaxlvertent nuclear weapon detonation, imauthonzed 
use, or acts of terrorism that might lead to misinterpretation, 
miscalculation, or hostilities. This transfer and/or exchange should 
be conditional on mechanisms that ensure this information does 
not degrade ejforts to prevent the proliferation of nuclear weapons, 
enhance the operational ejfectiveness of the recipient nation(s), or 
jeopardize the sqfety, security or control ofU,S. nuclear weapons 
systems, 

• (U) The National Laboratories can play a distinctive and 
important role in the process of determining appropriate 
technologies, procedures, systems and system data to consider. 

States of the Former Soviet Union (U) 

(U) Specifically, with respect to the states of the former Soviet Union, 
the Advisory Committee recommends the Secretary of Defense: 
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• (U) Toexploittheciirrentwindowofopportimityformeamngful 
risk reduction that now exists with the Reptiblics of theform^ 
Soviet Union, the United States should move beyond the traditional 
arms reduction agenda and pursue new initiatives (PoD is already 
pursuing many of these initiatives). These areas include: 

(U) Joint measures (e.g,, intelligence sharing) to reduce 
prol^eration; 

(U) Joint initiatives to provide timely warning; 

•• (U) Overview of U.S. and Russian/Commonwealth of 
Independent States command structures; 

••CU) A lexicon on command and control terminology 
which would supportfuture cooperative efforts and 
confidence-building measures; 

— (U) A dialogue on nuclear command and control^ 
oversight, command and control assessment techniques, 
and use control policies and standards with the aim of 
improving both sides' command and control capability to 
prevent unauthorized launches; and 

M (u) Discussions on early deactivation qf forces to be 
reduced under signed agreements. 




Undeclared/Emerging Nuclear States (U) 



• (U) Consider a Multilateral Nuclear Incidents Agreement, open 
to all nations, patterned after the U.S,-USSR "Accident Measures" 
and "Prevention of Nuclear War" agreements, and neutral and silent 
with respect to possession/development of nuclear weapons, as a 
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particularly attractive riskreductionmodelfor this category of 
nations. 
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APPENDIX A 

The FARR (Charter, Organization, Methodology) 



(U) Introduction ! 

(U) The Fail-safe and Risk Reduction Review (FARR) was 
initiated at the direction of the Secretary of Defense to assess 
the current and programmed Nuclear Weapons Command and Control 
System capability to meet the dual requirements of assurance 
against unauthorized use and timely, reliable execution when 
authorized by the President. A specific tasking was to identify 
opportunities for positive measures to enhance nuclear weapon 
safety, security and control and reduce the risk of the outbreak 
of nuclear hostilities due to miscalculation, accident, or 
deliberate action. 

(U) The Charter for the Advisory Committee for Nuclear Fail- 
safe and Risk Reduction, published in the Federal Register on 20 
December 1990, is reproduced on the following pages. The members 
of the Advisory Coitunittee were chosen and appointed by the 
Secretary of Defense in March 1991. The first meetings took 
place in May 1991 and for the next 18 months an extensive and 
comprehensive, top-to-bottom, independent, review of the U.S. 
nuclear command and control process was conducted. The five- 
member Advisory Committee was supported by over 150 personnel 
which were formed into specific working and study groups from 
over 50 government organizations and agencies in the U.S. Nuclear 
Command and Control System. Additionally, the Advisory Committee 
solicited and received the testimony and views of many prominent 
individuals from both inside and outside the government on the 
issues of improving the fail-safe and risk reduction nature of 
the U.S. nuclear command and control process. 
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CHARTER 

ADVISORY COMMITTEE 
FOR 

NUCLEAR FAIL-SAFE 
AMD 

RISK REDUCTION 

1. Title: Nuclear Fail-safe and Risk Reduction Advisory 
Committee. 

2. Committee's Terms of Reference. 

a. Purpose . To assess the current and programmed Nuclear 
Weapons Command and Control Systems capability to meet the dual 
requirements of assurance against unauthorized use and timely, 
reliable execution and to identify opportunities for positive 
measures to enhance fail-safe measures and reduce the risk of the 
outbreak of nuclear war due to miscalculation or accident. 

b. Scope . The review will examine the nuclear weapon 
command and control process from the NCA to the individual 
weapon. The study will focus on identifying opportunities to 
enhance the fail-safe and risk reduction capabilities of the NCCS 
consistent with national security policy and the requirement for 
assured authorized execution. The period of interest of the 
study will be 1991 to 2011. 

c. Approach . 

(1) An independent Executive Committee composed of three 
distinguished civilians or retired military from the private 
sector and two high level OSD officials will guide, provide 
formal review and approve the review findings. The committee 
will be chaired by the distinguished civilian designated by the 
Secretary of Defense. While the committee as a whole should 
possess knowledge of the political, technical, and military 
issues involved, part of the criteria for selection of some of 
its members will be to include persons without current 
involvement in the nuclear chain of command. Study Executive 
Committee Members will be appointed for a one year term and 
approved by the secretary of Defense using the procedures 
specified in "DOD Directive 4205.2, (CAAS)," January 27, 1986. 
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^ ccMMitte, Staff =^|i«t=Sli« cl^m^^^^^^^^^ 
conduct the study and support the Executive uomia 

preparing the final report. 

«... .o giStSKHtu.. 

Executive Coxnmittee (e.g., policy, procedures, c 
system, technology, etc.). 

(b) Comittee Staff and ="»'==»»i^^ft3:^r''^^ 
NCCS agencies* 

(3) The study will be.conducted in thre^ ?SrrfiecSvl- ' 
will reviei current ^CCS requirements a^^^^ 

ness of existing positive measures in J^^^tent use while 

Sent of assuring ^^^i^f^.^Jl^use "hS IStSSIi^Sd. Phase I will 
assuring timely and ^^i"e«\Sich will focus on: (a) current 
involve three subcoinmittees which wi^^ reduction 

safety, security, and <=oV^^?l,? «Jnn^tunities for post-launch 
mlasu^U; and (c) technological opportunitie^ f or P^^ ^^^^^^^ 

command destruct of ';^°,l,^^^J^tttee wiU document any deficiencies 
weapons at sea. Each f^^^f^^^^^^e^iing positive measures that 
fouSd and identify available or emerging po f^^j^.s^fe and risk 
may correct those deficiencies and ^^^^^l ^.^i mtegrate the 
reduction capabilities of the NCCS. Phase ii ^ ^ing NCCS 

findings of Phase I ^2^^?!^ ^^^^^j-eS wSie maintaining the 
fail-safe and ^^?^„^!f^5^^?\StSISor?zed use and assuring use 
. balance of assuring against ^^^^^J^^J^p the final report 

when authorized. P^Jf^^^^ iorreSr identified deficiencies and 
^oS»i™^an^^^ r^edSSfon improvements. 

d. nv«i*»r.feivest 

,ix *e«:o<5«: the effectiveness of existing positive 
(1) Assess the J^"^'';"^ control in the command and 
measures for safety, security, and °°;^^°^to assured execution 
control of nuclear weapons as they relate to ass 
and unauthorized use. 

fr>\ assess the effectiveness of existing positive 
„easures'Mr-srfeJna re^u=in,^^.e risK of out.reaK of a 
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(3) Determine what technological and procedural 
opportunities exist for changing the current system of positive 
measures in order to enhance the fail-safe and risk reduction 
capabilities of the NCCS. 

(4) Assess the impact such changes may have on US 
national policy, deterrence posture, military operational 
capabilities, and system costs. 

(5) Produce a prioritized list of recommendations for 
changes in or additions to US Fail-safe and Risk Reduction 
measures as appropriate. 

3. Period of Time Estimated: 1 year. 

4. Official to Whom Group Reports: Secretary of Defense. 

5. organization Responsible for Providing Support: U.S. Nuclear 
Command and Control System Support Staff. 

6. Description of Duties: Functions and goals of the Executive 
Committee are to provide advice and recommendations to the 
Secretary of Defense on matters dealing within the general scope 
of activity outlined in para 2 above. 

7. Estimated Annual Operating Cost in Dollars and Man- Years: 
$488,985.00 per year/10.8 man-years. (Of this cost, $406,585 is 
programmed.) 

8. Estimated Number of Frequency of Meetings: Approximately 
eight meetings of 2-3 day duration. 

9. Composition: 

a. The Secretary of Defense shall: 

(1) Designate a Chairman of the Executive Committee from 
the membership. 

(2) Authorize the U.S. Nuclear Command and Control System 
Support Staff (NSS) to support the Executive Committee in its 
mission. 

(3) Direct the Department of Defense and the NCCS 
supporting agencies (in his role as the NCCS Executive Agent) to 
provide support as required to the study. 
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Membership: The Executive Coinxnittee will be limited to 
no more than five persons, three from the private sector and two 
from DoD, who will be appointed for a one year tenii on the basis 
of their expertise in the areas for which the committee is 
responsible. Efforts will by made to assure that the non- 
government committee members are well-balanced as to their 
represented interests and functions to be performed during the 
course of the study. Committee members will be approved by the 
Secretary of Defense using the procedures specified in "DoD 
Directive 4205.2, (CAAS)," January 27, 1986. 

10 • Responsibilities : 

a. Director, Nuclear Command and Control System Support 
Staff shall: 

(1) appoint the Staff Director (Federal designated 
official) , who will be responsible for the proper functioning of 
the Executive Committee in accordance with DoD Directive 5105.4, 
"DoD Federal Advisory Committee Management Program," September 5, 
1989. The Staff Director shall call the meetings, approve the 
agenda, attend each meeting, and adjourn meetings when he or she 
determines it to be in the public interest. 

b. The Chairman of the Executive Committee is responsible 

for: 

(1) assuring agenda and supporting documents that 
facilitate decision making by the Executive Committee are 
prepared and distributed well in advance of scheduled meetings. 

(2) presiding at all Executive Committee meetings. 

(3) assuring that the issues are addressed completely. 

(4) assuring appropriate reports as well as other 
documents and records of the Executive Committee, including 
financial records, are prepared and maintained on file. 

(5) assuring that the final Executive Committee report, 
covering all necessary issues, is prepared and delivered to the 
Secretary of Defense in a timely manner. 

11. Termination Date: Approximately one year from the date of 
this charter, but not longer than two years. 
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12. The executive Committee shall operated in accordance witl 
the provisions of DoD Directive 5105.4, "DoD Federal Advisory 
Committee Management Program," September 5, 1989. 

13. Date Charter filed: 20 December 1990. 
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(U) Organization ; 

(U) As specified in the Charter, a Federal Advisory 
Committee, composed of two distinguished civilians from the 
private sector, a retired high ranking military officer and two 
high level OSD officials, was appointed by the Secretary of 
Defense. The Chairperson of the Advisory Committee was 
Ambassador Jeane J. Kirkpatrick, former U.S. Ambassador to the 
United Nations and distinguished scholar. The other members 
included the Honorable Stephen J. Hadley, Assistant Secretary of. 
Defense for International Security Policy; the Honorable Duane P. 
Andrews, Assistant Secretary of Defense (Command, Control, 
Communication and Intelligence) and Director, U.S. Nuclear 
Command and Control System Support Staff; Admiral Robert L. J. 
Long, USN (Retired) , former Vice Chief of Naval Operations and 
former Commander in Chief, U.S. Pacific Command; and the 
Honorable, Arthur B. Culvahouse, former White House legal 
counsel . 

(U) The Advisory Committee was supported by a Committee 
Staff from the U.S. Nuclear Command and Control System Support 
Staff, plus working and study groups made up of personnel from 
within the nuclear weapons command and control communities. The 
overall organization is depicted in Figure A-1. 
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Figure A-1 
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(U) These groups were established by the Advisory Committee to 
conduct detailed investigations ; and analyses of issues. 
Following guidance of the Committee, they presented their 
findings and recommendations in a series of briefings and written 
reports which the Advisory Committee used to formulate its 
judgments, recommendations and the Final Report for the Secretary 
of Defense. The following Chairpersons of the Working and Study 
Groups were selected because of their experience and expertise in 
the areas of interest to the Fail-safe and Risk Reduction Review: 

(U) Technology Working Group ; 

' Dr. Heinz W. Schmitt, Vice President, Engineering and 
Component Development, Sandia National Laboratory 

(U) Remote Destruct Study Group : 

Col Randolph M. Blanks, USAF, Chief, Strategic 
Division, Directorate of Strategic and Airlift Forces, 
Office of the Secretary of the Air Force 

(U) Positive Controls Materials & Devices Study Group : 

Mr. Scott R. Randall, Technical Director, Naval Weapons 
Evaluation Facility 

(U) Fail-safe Working Group : 

RADM Arlington F. Campbell, USN, Deputy Director, 
Defense Information Systems Agency (DISA) 

(U) Nuclear Command and Control System fNCCS) Assessment 
Study Group : 

Dr. Jeremy M. Kaplan, Deputy Director Systems 
Engineering & Integration, Defense Information Systems 
Agency, (May 1991-Dec 1991X 

Mr. Bruce J. Brown, Deputy Director Systems Engineering 
fit Integration, Defense Information Systems Agency, (Jan 
1992-Present) 

(U) Weapons Systems Review Study Group : 

Col Frank M. Willingham, USAF, Chief, Nuclear Security 
Division, Defense Nuclear Agency (May 1991-Aug 1991) 
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COL Joseph P. Phillip, USA, Assistant Di^^^^^?^' ^^J'^^l" 
survivability and Security, Defense Nuclear Agency (Sep 

1991-Present) 

(U) Policy anri Peauir pTnents Study Group.; 

Mr. Gregory L. Schulte, Director for Strategic Force 
policy! Office of the Assistant Secretary of Defense 
(International Security Policy) 

(U) Pisk RedU<--tiQn WO T-Vina GroUPt 

Mrs. sally K. Horn, Director, Verification Policy, 
Office of the Assistant Secretary of Defense 
(International Security Policy) 

(m Shortly after the initial meetings of the Advisory committee, 
inLific tasking were developed for each of the supporting 
working groups^ ?he following are these specific taskings which 
were assigned: 

. (U) Technology Working Group (TWG) Tasking: 

a (U) Purpose : Support the Advisory Committee by 
conductincj Investigations and developing descriptions of 
teShnoliSical opportunities to implement new or improve current 
and Srog?aSed nS^lear command and control hardware software and 
e^ipment related to fail-safe and/or risk reduction. 

b (U) Scope . Develop system technical descriptions 
which include applicability of advanced technologies and an 

^siSssient of technical risk, in^f^^^^^^^P^JlJ'^^^S'JeioSrc? 
additional system vulnerability, mission impact and resource 
?eqiiieSlnts: In coordination with the other working groups, 
develop a full discussion of pros and cons for each 
system/equipment described. 

c. (U) Spp-cific Ob-iectives. 

1. (U) Develop technical descriptions and 
alternatives (with pros/cons and associated cost J^timates) in 
response to issues and initiatives identified by the Fail safe 
and Risk Reduction Working Groups. 

2. (U) Directly address the technical means of 
implementing (including a broad range of technical alternatives) 
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(a^ (U) use of cryptographically coded 
electronic locKing AVice^L all nuclear weapons system at sea. 

fbl (U) installation of post-launchde struct 
capability on/for i^J^^^^^^^^^^ 

ballistic missiles a^^*,®"/^®' "^^^Sr thin approximately 30 ^ 
extended flight times (e.g., I^^J^f^flJe study this specific 
minutes) . [Note: D^^J^J^^^^SSfan investigation installing 
l^s^^oTl^VS^^t^l^^ short^ange attacK 

missiles and nuclear bombs.] 

. (U) Fail-safe Working Group (FWG) Tasking: 

a. (U) PaSE2S«. support the Ad^i^^^y 
identifying, reii^^g and desori^ng curren^^^^^^ 

fail-safe and risk reduction. 

nu <;coDe Policy and requirements review to 

b. (U) ScoES. i.,, eoTn/iee and CINC planning and 
examine national, departmental, Service, and cii^ P 

policy documents. N^<=l^^J^^°^^f ^hf tfthrioiel^ element 
?evieJ to include the system from the NCA to .^^^^^^ ^^^^^^^ 

exercising command and ^o"^^?^- ^Jl^tton and facilitate decision 

the NC2 process was not required. 

c. (U) g p'^r.^^^c o v.nf>ctives. 

1, (U) Policy 8 r»H Reoujyp-ments. 

(a) (U) Review existing nuclear command and 
control policy and i^titify^uidelines and direction related to 
fail-safe and risk reduction. 

(m Identify and define nuclear command 

(c\ (U) Provide findings on ^. „ 
policy/requirements Liiclencies and ^-elop alternatives for 
short/long term improvements to correct deficiencies. 
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2. 




(a) (U) Develop system and PJo^^^|^ ^.^^us 
descriptions for coxnmand and "2^^°^ °1 "^^efrelated to existing 
descriptions on P^i^^^f^f l^^'^Sp^Sved f aU-saf e and risk 
or potential 0??°^^^^^^^^^°^ ^^^^desSiption , include 
reduction. In system and process ^^JJ^I'^f °riiats , and procedures 

descriptions and assessments. 

/wx /TTN arfont a riqorous methodology and 

equipment to enhance the ^^ii„!^J^_^®||cilitates identifying ^ 
itk^.l'k.>^r^^e^lnTlll^^^^T^\s risKs associated wxt. 
deliberate unauthorized acts.. 

tr\ (m Develop findings and alternatives 
. ^ L™inl to exploit opportunities to improve 
for procedures and e5^^P^^2^„^° f ?f ^Sclear weapons. For each 
the fail-safe command and control of n^^ .^^^^^^ 

finding, develop ? J^^^_tw°aSSi?ed execution and assurance 
dual requirement for ^^^^^^ ^JJo^ide an estimate of costs to 
against unauthorized ^J^^^^^.P^echnlcal alternatives with the 

i7olZl%y^fr^'V-^^^^^^^^ - assessment. 

. (U) Risk Reduction Working Group (RRWG) Tasking: 

tm Purpose. Support the Advisory Committee by 
identifying; reiiL^i^^d descri^^^^^^ . 
facilities, equipment, and proceaures as accident, 

Tiyni*- ♦•h^* risk reduction review to 
b. W ^Ho^^iLtmSnt of Defense. Focus will 

areas under the purview jJ^^^J^^^P^^^^rdesigned to prevent or 
be on those portions of the NC2 P^°*=!!^ /Result of an accident, 
mitigate against a nuclear J^J^^^^^J^^^ulhorized act. [Note: 
miscalculation, misinterpretation, unau^n 

Siring the review this scope was ^JP^"^^^^^^ iS^'if Defense but 
outside the immediate purview of the Department or 
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Which included strong DoD interest as it related to nuclear risk 
reduction.] 

c. (U) Specific Objective , 

1. (U) Characterize and assess the nuclear risk 
reduction features of the NC2 process and identify opportunities 
for improvement. 

2. (U) Based on policy criteria and requirements 
for risk reduction measures received from the Policy and 
Requirements Study Group, identify current risk reduction 
measures, elements employing these measures, and what type of 
crises and/or risks these measures can mitigate against. 

3. (U) Identify any additional appropriate 
measures that could improve the existing risk reduction 
capabilities of the NC2 process. 

4. (U) Identify pros and cons of implementation 
of such risk reduction enhancements including the uncertainties 
associated with a not yet stabilized new international politico- 
military environment. 

5. (U) Provide an estimate of costs associated 
with implementing assessed enhancement options. 

(U) Participating Organizations ; 

(U) All government departments and agencies which are a part 
of the U.S. Nuclear Command and Control System were tasked with 
supporting the efforts of this Advisory Committee. Each of the 
Chairpersons of supporting working and study groups was asked to 
gather together the expertise required in order to complete the 
assigned tasking. Personnel from the following government 
organizations, agencies and of f ices :prpvided supporting 
participation in the working and study groups during the conduct 
of the Nuclear Fail-safe and Risk Reduction Review: 

1. National Security Council (NSC) 

2. Central Intelligence Agency (CIA) 

3. National Communications System (NCS) 

4. U.S. Nuclear Command and Control System Support Staff (NSS) 
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Department of Energy (DOE) 

a. Deputy Assistant Secretary for Military Applications 
(DASMA) 

b. Associate Director for Weapon Safety 

c. Sandia National Laboratory (SNL) 

d. Los Alamos National Laboratory (LANL) 

e. Lawrence Livermore National Laboratory (LLNL) 
Department of Defense (DoD) 

a. Office of the Secretary of Defense (OSD) 

(1) Office of the Assistant Secretary of Defense 
(Command, Control, Communications and Intelligence 
(0ASD/C3I) 

(2) Office of the Assistant Secretary of Defense for 
International Security Policy (OASD/ISP) 

(3) Office of the Assistant Secretary of Defense for 
International Security Affairs (OASD/ISA) 

(4) Office of the Assistant to the Secretary of 
Defense for Atomic Energy (OATSD/AE) 

(5) Office of the Principal Deputy Under Secretary of 
Defense for Strategy and Resources (OPDUSD/S&R) 

b. Defense Agencies 

(1) Defense Information Systems Agency (DISA) 

(2) Defense Intelligence Agency (DIA) 

(3) Defense Nuclear Agency (DNA) 

(4) Defense Technologies Security Administration 
(DTSA) 
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(5) National Security Agency (NSA) 

(6) Strategic Defense Initiative Organization (SDIO) 
Joint Chiefs of Staff (JCS) 

(1) Operations Directorate (J-3) 

(2) Strategic Plans and Policy Directorate (J-5) 

(3) Command^ Control, Communications and Computer 
Systems Directorate (J-6) 

(4) Force Structure, Resource, and Assessment 
Directorate (J-8) 

Commanders-in-Chief of the Unified and Specified 
Commands (CINCs) 

(1) US Atlantic Command (LANTCOM) 

(2) US Pacific Command (PACOM) 

(3) US Strategic Command (STRATCOM) [Strategic Air 
Command (SAC) ] 

(4) US Space Command (SPACECOM) 

(5) North American Air Defense Command (NORAD) 

(6) US European Command (EUCOM) 
Military Services 

(1) US Army 

(a) Army Staff 

(b) US Army Nuclear and Chemical Agency (USANCA) 

(c) US Army Strategic Defense Command (USASDC) 

(2) US Air Force 

(a) Office of the Secretary of the Air Force 
(OSAF) 
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(b) Air Staff 

(c) Air Force Directorate of Nuclear Surety (AF- 
DNS) 

(d) Air Force Logistics Command (AF-LC) 

(e) Air Force Space Command (AFSPACECOM) 

(f) Ballistic Missile Office (BMO) 

(g) Aeronautical Systems Division (ASD) 
US Navy 

(a) Navy Staff 

(b) Strategic Systems Program Office (SSP) 

(c) Cruise Missile Program Office (CMPO) 

(d) Naval Weapons Evaluation Facility (NWEF) 

(e) Naval Surface Warfare Center (NSWC) Dahlgren 

(f) Naval Sea Systems Command (NAVSEA) 

(g) Naval Air Systems Command (NAVAIR) 
US Marine Corps 

(a) Office of the Commandant of the Marine Corps 
(OCMC) , Plans Division 
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IP) 

(U) The HucXear Fail-safe and Ri-''.Ked"'=li°" <^*5!^ 
was conducted using the methodology depicted in Fig. A 2. 
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Figure A-2 

Throughout the conduct of the review t^"*"" »"„;'=^i:%o?king 
dynamic dialogue th^^AJ'^^°|y^<=|S^J^^f^/?f^f^ha^^^ 
and Study Groups supporting them. The roiiowin^ ^'^''^J\.. 
Mvisory Conunittee Activities are identified and described. 

1. (U) Familiar ization 

(U) The members of the Advisory Committee received documents 
and briefings covering pertinent background ^^^erxal on the 
command and control of nuclear weapons. The material includea 
definition of the nuclear command and control system (NCCS) , the 
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nuclear command and control (NC2) P^°=®^^' J^^J^'oriSr Studies and 
organizational responsibilities, and results of P"°J/^^ 
ongoing assessments. Site visits ^^^^S to observe, 

familiarization process to allow "^^^''control 
first hand, a broad range of nuclear «°^S^^"^f^2u!?Ies. 
processes, procedures, equipment, personnel and faciiiT:i 

(U) specific tasking was provided to the Working and Study 
Groups which responded with Proposed plans of actxon for 
conducting their assigned analysis, investigation, research, or 
review. 

2. (U) research 

m\ The members of the Advisory Committee received series of 
brieflnU frorfhefr ^-king and Stud^^^^^^ 

understanding of: 

a (U) Existing policy and requirements for positive 
measures to prevlnt unaithorized or inadvertent use of U.S. 
Suc?e" weapons and to reduce the risk of nuclear 
Hostilities occurring as a result of an accident, 
misinterpretation, or miscalculation; 

h fU^ Existing positive measures, in both the individual 
w;apois^yiilms Ind in the overall NCCS, for the^prevention 
oHnauthorized or inadvertent launch, release pre-armin^ 
arming, firing, or loss of control of U.S. nuclear weapons, 

(m Existing positive measures for reducing the risk of 
Iny accide^" milinterpretation, or miscalculation leading 
tS nSclear hostilities and for mitigating the outcome of 
such an event should one occur; 

d tU) The feasibility and desirability of implementing 
Additional nuclear fail-safe and risk reduction measures, to 
include: 

(1) (U) Expanded capabilities for risk reduction, 
exchange of information, notifications and system 
ZTsurTs to promote confidence building between nuclear 
nations; 

(2) (U) Installation of post-launch destruct 
mechanisms on nuclear weapons; and 
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(3) (U) installation of coded control devices on all 
United States nuclear weapon systems. 

3. (U) Findings 

(U) initial findings of the Working and Study Groups were 
presei?Ld'K^^ 

Seiltrirtfe lllTlr^l iiSHfs^ 

.e adM rri^r..^/^^^^^^^^ ^^T^^^^^^l^ 
i-Tis^t^dTn l^l^l'lll Tf'^Mc^^^^^ 

options under consideration. 

(m An Interim Report (briefing) was made to the Secretary 
of Defenst in jiniary 1992 bn the current status on the review 
elfort and Se emerging themes that the Advisory Committee were 
considering. 

4. (U) Option E valuation 

(U) After considering the results of impact assessments for 

variois' options to improve the nV^l«;^^^°;;"'^i;^,SS?hrand 
orocess the Advisory Committee identified strengths ana 
SeaknSses of the current command and control system and 
:et^2atld^Sl Stions for. improvements and -^ancements to syst^ 
fail-safe and risk reduction capabilities. In this evaluation, 
tSe AdvfsoS CoSttee considered technical feasibility, fiscal 
coStsT and time required for the implementation of such 
enhancements as well as the potential impacts of such actions on 
National policy, deterrence posture and assured use when 
authorized. 



5. (U) Report 

(U) Working and Study Groups investigations and analyses 
were documented in final reports to the Advisory Committee 
These reports were placed in an archive in the U.S. Nuciear 
command and Control System Support Staff offices. After 
considering the results of the efforts of the Working and Study 
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Groups, the Advisory,Co.mittee made its ^^^^^ j^J^l^^^^Sveinents 
specific recommendations and ^ J^^rlduStioA capability 

and enhancements to the f^il-J^^^^^^^^i^l^stSm. The Advisory 
of the U.S. Nuclear Command and Control system. 

Somi5lte;^Final report was ^f-^^Pf DeJeSf 
recommendations to the Secretary of Defense. 
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Briefings and Pl? r!t»g Visited 
Tj^TT-RAVK AKD RISK REPnCTTON PBVTEW RDVTSORY COMMITTEE 
noWSOLIDATPn T.TST OF COMMITTEE BP T^T^TMGS AND PT.RCES VISITED 



DATE 



TITLE 



SPONSOR/BRIEFER 



9 May 91 JCS Overview 

(Review of the 1986 JCS 
Study on Nuclear Command 
and Control) 

National Nuclear Command 
and Control (NC2) Policy 



Single Integrated Operations 
Plan (SIOP) overview 

10 May 91 NC2 Structure, Communications 
and Connectivity 

Demonstration in the 

National Military Command 
Center (NMCC) 

code Security Brief 



Federal Advisory Act Brief 
Proposed Review Process 
Formal Committee Meeting 



Joint Staff 



Dr. John Weinstein, 
Nuclear Command 
and Control System 
(NCCS) Support 
Staff (NSS) 

Joint Staff 
Joint Staff 
Joint Staff 

Mr. Bill Marks, 
National Security 
Agency (NSA) 

DoD General Counsel 

Committee Staff 
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TITLE 



SPONSOR/BRIEFER 



20 May 91 Integrated Tactical Warning and 
Attack Assessment 

Drell Commission and DOE Study 
Review 



Policy Issues Associated with 
National Security Decision 
Directive, "Nuclear Weapons 
Command and Control" 

Non-strategic Nuclear Forces 
Weapons Design and the Role 

of Safety and Use Control 

Features 

Positive Measures to Control 
Use of Nuclear Weapons 

23-25 Jul European Command (EUCOM) 
site Visit 

23 Jul 91 USEUCOM stockpile Reduction 

Overview 

USEUCOM Stockpile Failsafe 
Design Features 

Failsafe Related NCOS 
Deficiencies 

Implementation of NSDD 
"Nuclear Weapons Command 
and Control" within DoD 

24 Jul 91 USEUCOM Nuclear Command and 

Control 



Joint Staff 



Dr. Robert Barker ^ 
Assistant to the 
Secretary of 
Defense for Atomic 
Energy (ATSD/AE) 

Mr. Frank Miller 
Mr. John Grimes 
(OSD) 



Joint Staff 
Sandia Nat'l Lab 



Sandia Nat'l Lab 



USEUCOM Surety Briefing 

EUCOM Headquarters Emergency 
Action Demonstration 



Committee Staff 
Committee Staff 
Committee Staff 
Committee Staff 

EUCOM Staff 

EUCOM Staff 
EUCOM Staff 
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3 Sep 91 Permissive Action Links on 

SLBMs and TLAM(N)s (Woolsey 
Report) Briefing 

Views on Nuclear Failsafe and 
Risk Reduction 



Technology Working Group Plan 

Failsafe Working Group 
Risk Reduction Working Group Plan 
18 Oct 91 Views on Soviet NC2 

Soviet NC2 

Soviet Situation 



Other Foreign NC2 

Emergency Action Procedures of 
the CJCS, Vol IV 

SIOP 



Amb. James Woolsey 



Dr. Richard Brody^ 
Center for Naval 
Analysis (CNA) 

Dr. Heinz Schmitt 
Col R. Blanks, USAF 
Mr. Scott Randall 

RADH A. Campbell 

Mrs. Sally Horn 

Dr. Bruce Blair , 
Brookings Inst. 

Central Intelligence 
Agency (CIA) 

Mr. Art Zuehlke, 
Defense 
Intelligence 
Agency (DIA) 

CIA, DIA 

Joint Staff 

Joint Staff 



5 Nov 91 Nuclear Weapons Safety Studies 



Policy and Requirements 
Study Group Brief 

Views on Remote Destruct of 
Nuclear Missiles 



Dr. John Foster^ 
Defense Science 
Board (DSB) 

Mr. Greg Schulte 
Dr. John Weinstein 

Dr. Sherman Frankel 
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10 Dec 91 Discussions with Commander 
(Cont'd) U.S. Submarine Force, Atlantic 
(COMSUBLANT) and Director, 
Strategic Systems Programs 
Office (DIRSPO) 

17 Dec 91 Positive Control Study Group 
Presentation 

Nuclear Proliferation 



Proposed DoD Use Control 
Policy 

Use Control - Joint Staff 
Perspective 

Notional Remote Destruct System 
Joint Staff Perspective 

Use Control - USAF Perspective 

Use Control - Navy Perspective 

6 Jan 92 Emergency Action Procedures of 
the CJCS, Vol IV 

Interim Report Briefing, 
Technology Working Group 
(TWG) 

Emerging Themes - Weapons 
Systems Review Study Group 
(WSRSG) 

Risk Reduction Working Group 
(RRWG) Key Themes 



VADM Henry Childs 
RADM John Mitchell 



Mr. Scott Randall 



Mr. Gordon Oehler, 
National 
Intelligence 
Officer (NIO) 
for Nuclear 
Biological and 
Chemical (NBC) 
Proliferation 

Dr. Robert Barker, 
ATSD/AE 

Joint Staff 



Joint Staff 



USAF Staff 
Navy Staff 
Joint Staff 



Dr. Heinz Schmitt 
Col R. Blanks, USAF 
Mr. Scott Randall 

COL Joe Phillip 



Mrs. Sally Horn 
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22 Jan 92 Feasibility of Coded Control 
Devices (CCDs) 

Positive Control Devices - 
Pros and Cons 

Post-Launch Destruct Devices - 
Pros/Cons 

Formal Coimittee Meeting 

29 Jan 92 Interim Report Delivered to 
SECDEF 

6 Mar 92 Weapons Systems Review Study 
Group (WSRSG) Options 

NC2 Facility Security - 
"60 Minutes" Tape 

Personnel Reliability Program 
and Security 

20 Mar 92 Use Control Devices 

Effectiveness Assessment 



Remote Destruct Study Group 
(RDSG) Options 

Positive Control Materials 
& Devices Study Group 
(PCMDSG) Options 

2 Apr 92 views on Post Launch Destruct 

NCOS Assessment Study Group 
(NASG) Options 

RRWG Options 

24 Apr 92 Safety, Security, and 

Dismantlement Options 



Mr. Scott Randall 

Dr. Heinz Schmitt/ 
RADM A. Campbell 

Dr. Heinz Schmitt/ 
RADM A. Campbell 



COL Joe Phillip 

Col Robert Pike 
(OSD) 

Mr. Jeff Everett, 
NSS/Mr. Vern Willen, 
Department of Energy 

Col Randolph Blanks 
Mr. Scott Randall 

Dr. Kosta Tsipis 
Mr. Bill Thoms 

Mrs. Sally Horn 

Dr. Robert Barker, 
ATSD/AE 
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24 Apr 92 Intelligence Update - Former 
(Cont'd) Soviet Union Weapons Matters 



DOD NCCS oversight 
NASG Assessments I 
30 Apr 92 views on Post Launch Destruct 
Computer Security 

DoD/DOE "Delay" Programs 

15 May 92 Views on Post Launch Destruct 

RDSG Final Assessment 

PCMDSG Final Assessment 

5 Jun 92 Strategic Defense Initiative 
Discussion 

2 Jul 92 Views on Failsafe and Risk 
Reduction 

RRWG Assessment (Issues #5, 6) 
NASG Assessment II 
WSRSG Assessment I 
16 Jul 92 WSRSG Assessment II 



cpnTJgnP /RRTEFEI 

Dr. Larry Gershwin 
National 
Intelligence 
Officer for 
Strategic System 

LCDR Rick Hagy, NSS 

Mr. Bill Thoms 

Dr. Richard Garwin 

Mr. Dan Ryan, 
OSD 

Mr. Jeff Everett/ 
Dr. Ray Reynolds/ 
Mr. Sanders/ 
Col Robert Pike 

Dr. Sherman Frankel 

Col Randolph Blanks 

Mr. Scott Randall 

Amb. Henry Cooper 

Dr. Fred Ikl6 

Mrs. Sally Horn 
Mr. Bill Thoms 
COL Joe Phillip 
COL Joe Phillip 
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TITLE 
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16 Jul 92 RRWG Assessment (Issue 10) 
(Cont'd) - intelligence Support related 
to Risk Reduction 

- DOD Efforts to Counter 
Proliferation 

- Intelligence Communxty Efforts 
to Support Countering 
Proliferation 

- strategic and Tactical Warning 
of Nuclear Attack 

11 Aug 92 PRSG Assessment 

WSRSG specific Issues Briefing 
OCONUS site security Review 

8 Sep 92 Final Report Deliberations 
(Executive Session^ 

25 Sep 92 Final Report Deliberations 
(Executive Session) 

30 Oct 92 Formal Meeting, Approval of 
Final Report 



Mr. Brooks Shelton 

Mr. Sokolsky 

Mr. Gordon Oehler 

Mr. Bill Thoms 

Mr. Gary Betourne 
COL Joe Phillip 
COL Joe Phillip 
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BRIEFINGS 3^ PLACES VISITED 

Technology Working Group; 
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LOCATION 
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DATE 



TITLE 



RPQNSOR/RT^TEFER/ 
T^CATION 



4 Oct 91 Tamper Detection Technology 



4 Oct 91 Threat Definition 



13 Feb 92 ICBM Command and Control 



1 Nov 91 Unauthorized Launch Analysis 
(ULA) Methodology/Results 



1 Nov 91 Unauthorized Launch Analysis 
(ULA) Methodology/Results 



1 Nov 91 Unauthorized Launch Analysis 
(ULA) Methodology/Results 



4 Oct 91 Misc. Navy Nuclear Weapon 
System Studies 

4 Oct 91 Stockpile Improvement Studies 



Sandia Nat'l Labs 
Albuquerque, NM 

National Security 
Agency (NSA) 

National Security 
Agency (NSA) 

Air Force 

Directorate of 
Nuclear Surety 
(AFDNS) 

Cruise Missile 
Program Office 
(CMPO) 

Strategic systems 
Program Office 
(SSPO) 

Sandia Nat'l Labs 
Albuquerque, NM 

Sandia Nat'l Labs 
Albuquerque, NM 



Fail Safe Working Group; 

W«^apons System Review Study Crour, rWSRSG^ t 
ACTIVITIES VISITFDt BRIEFINGS 
DATE TITLE 



SPONSOR/BRIEFER/ 
LOCATION 



17 Jun 91 Unauthorized Launch Army Nuclear and 

Analysis (ULA) Methodology, Chemical Agency, 

Site Security Survey Fort Belvoir, VA 

Results & Nuclear Safety Program 
Overview 
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21 Jun 91 Air Force Nuclear Safety Program 

Overview 

22 Jun 91 

25 Jun 91 Nuclear Weapon Stockpile 
Characteristics 



25 Jun 91 JCS NC2 Study Relative 
to WSRSG Charter 



17 Sep 91 Navy Nuclear Weapons 

Safety Program Overview 
& TLAM-N ILA Methodology 



18 Sep 91 Inadvertent Launch 

Analysis (ILA) 

19 Sep 91 results on ICBMs & 

Air Force Bombs; & 
TLAM-N Unauthorized 
Launch Analysis (ULA) 
methodology 

6 Nov 91 Tamper-Indicator 

Vulnerabilities & 
Evolving Technologies 

13 Nov 91 Fleet Operations Overview 



12 Dec 92 Weapon Vulnerabilities 



21 Jan 92 DOE*s One-Point Safety 
Certification Program 
& New Diagnostic 
Tools 



Air Force Safety 
Agency, Det 1, 
Kirtland AFB, NM 

Defense Nuclear 
Agency, 

Alexandria, VA 

Nuclear Command & 
Control System 
Support Staff, 
Washington, DC 

Naval Weapons 
Evaluation 
Facility, 
Kirtland AFB, NM 

Air Force Safety 
Agency, Det 1 
Kirtland AFB, NM 



Army Armament R&D 
Engineering 
Center, Dover NJ 

Commander in Chief, 
Atlantic, Norfolk, 
VA 

National Labora- 
tories Complex, 
Livermore , CA 

Los Alamos National 
Laboratory, Los 
Alamos, NM 
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TITLE 



SPONSOR/B RIEFER/ 
LOCATION 



22 Jan 92 Air-launched Cruise 

Missile ILA method- 
logy & results 

10 Feb 92 Trident ULA Methodology 



14 Feb 92 TLAM-N ULA results 



7 Apr 92 Nuclear Safety Program 

Overview 

8 Apr 92 Remote Destruct Options 

& Use Control Overview 

1 May 92 Trident ULA & ILA Results 



12 May 92 Software Security 

Program & Planning 



14 May 92 Procedures & Systems for 
Locating Lost/Stolen 



21 May 92 Navy Weapon Storage 

Site Security Program 
& Problems 

28 Jul 92 Site Security Folders & 
Contingency Planning 



ACTIVITIES VISITED! DEMONS TPATTQNS /TOURS 

12 Aug 91 Nuclear Weapons Recovery 
Exercise 

18 Aug 91 



Air Force Safety 
Agency r Det 1 
Kirtland AFB, NM 

Strategic Systems 
Program Office, 
Arlington, VA 

Cruise Missile 
Program Office, 
Arlington, VA 

Field Command, DNA, 
Albuquerque, NM 

Sandia Nat'l Labs, 
Albuquerque, NM 

Strategic Systems 
Program Office, 
Arlington, VA 

Defense Information 
Systems Security 
Program, 
Washington, DC 

DOE, Nevada 

Operations Office, 
Las Vegas, NV 

Marine Corps 

Security Force, 
Norfolk, VA 

Defense Nuclear 
Agency, 

Alexandria, VA 



Anderson AFB 
Guam, MI 
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DATE TITLE 




S PONS OR / BRI EFER/ 
LOCATION 


2 Mar 92 NMCC Operations 




Joint staff 
Pentagon 


20 Apr 92 Joint Staff Review 


Of Briefing 


DISA at Pentagon 


Risk Reduction Workina Group 


fRRWG) : 




DATE TITLE 




SPONSOR/BRIEFER/ 
LOCATION 



23 Sep 91 Security of Soviet Nuclear Weapon DIA 
Storage Sites 
Security of Soviet Nuclear Weapon 
Units 

Soviet Nuclear Command and Control 
Safeguards 

26 Sep 91 Third-world Countries and Nuclear DIA 
Proliferation 

10 Oct 91 PRC Nuclear Command and Control DIA 
Terrorism 



21 Nov 91 Preliminary Failsafe & Risk 
Reduction Options of Farr 
Technology Working Group 



NSS 



12 Dec 91 Nuclear Proliferating States 



NIO/DIA 



10 Jan 92 Chinese Nuclear Command and 
Control Issues 



Los Alamos Nat'l 
Labs (DOE) 
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Excerpt from the FY 91 DoD Authorization Act (P.L. 101-510) : 

"Sec 1441. SENSE OF CONGRESS ON ADDITIONAL NUCLEAR RISK REDUCTION 
MEASURES 

(a) FINDINGS. — Congress makes the following findings: 

(1) on June 1, 1990, the President of the United States and 
the President of the Soviet Union signed a document entitled 
"Soinllta^ement on Future Negotiations on Nuclear and Space Arms 
and Further Enhancing Strategic Stabxlity". , , , . ^ rM,^cne 

(2) in that document, the two nations pledged to pursue 
additional confidence-building and predictability ^easures "that 
would reduce the possibility of an outbreak of "^^iJ^^^^J^/^ ^ 
Result of accident miscalculation, terrorism or ^^^^P^^^^f -^^^s 
technological breScthrough, and would prevent possible incidents 

between them^. ^^^^^^ increase in ethnic, national, 

economic and political tensions within the Soviet Union, ?oncern 
hafheighlened regarding the possible unauthorized or accidental 

°^4r^t^Lrbeen%rr";el;s since the Department of Defense 
conducted a comprehensive review of its nuclear control 
procedures and failsafe mechanisms. Miiitarv 
(5) The Joint Chiefs of Staff, in its 1990 J°^"t Military 
Net Assessment, concluded that with the recent <=hanges in the 
global security environment "the risk of nuclear deterrence 
failing is assessed to be low and at this moment to be 
decreasingj^^ Congress is concerned about continued strategic 
of fensfie and defensive modernization by the Soviet Union and the 
unoredictable status of the domestic situation in the Soviet 
SSion It this sSge the lessened prospects that nuclear weapons 
of th4 Snited States might have to be employed may afford an 
opportunity to Sconsidlr past reluctance to use certain positive 
I?S?rorieasures, such as the installation of P«P"^f ^i^f,„??^^°" 
links (PALS) on nuclear weapons deployed at sea by the United 
States and the installation of post-launch destruct mechanisms on 
intercontinental ballistic missiles (ICBMs)^and submarine 
launched ballistic missiles (SLBMs) deployed by the United 
States, as long as appropriate security measures can be developed 
to protect the integrity of such destruct mechanisms. ... 

(7) on September 15, 1987 the Untied States and the Soviet 
union agreed to establish. Nuclear Rick Reduction Centers (NRRCs) 
in Washington and Moscow. 

(8) The NRRCs have made a useful contribution to lowering 
the risks of accidental or inadvertent nuclear war and are 
capable of taking on expanded roles. 

(b) SENSE OF CONGRESS. — It is the sense of Congress -- 
(1) that the President of the United States and the 
President of the Union of Soviet Socialist Republics are to be 
commended for their June 1, 1990, joint statement to pursue 



additional nuclear confidence-building measures; and 

(2) that, in keeping with that joint statement, the 

President — . . . .uu ^-v.^ 

(A) should invite the Soviet Union to join with tne 
United States in conducting separate but parallel, comprehensive 
reviews of each nation's own nuclear control procedures and 
failsafe mechanisms; and 

(B) should propose to the Soviet Union that 
representatives of the two nations engage in discussions with the 
objective of agreeing on additional roles and functions that 
could be assigned to the Nuclear Risk Reduction Centers to 
further lessen the risks of the outbreak of nuclear war as the 
result of misinterpretation, miscalculation, or accident. 

(c) REPORT ON ADDITIONAL MEASURES. — Not later that March 1, 
1991 the President shall submit to Congress a report (in both 
classified and unclassified form) assessing additional nuclear 
risk reduction measures which could be implemented pursuant to 
the joint statement of June 1, 1990, referred to in subsection 
(b) , including the following: , . 

(1) Assigning to the Nuclear Risk Reduction Centers (NRRCs) 
such expanded roles as the following: 

(A) Serving as a forum for discussions between the two 
nations on responding to possible nuclear terrorism. 

(B) Transmitting notifications that may be required 
under future arms control treaties. 

(C) Transmitting non-urgent notifications and 
information requests required under Article 5 of the 1971 
Agreement on Measures to Reduce the Risk of Outbreak of Nuclear 
War Between the United States and the Union of Soviet Socialist 

Republics. . V. 4. *.v,^ 

(D) Providing a forum for discussions between the 
United States and the Soviet Union on restricting nuclear, 
chemical and missile proliferation. 

(E) Serving as a meeting place for high-level military 
discussions on nuclear doctrine^, forces and activities, and 
regional security concerns. 

(2) Installation of post-launch destruct mechanisms on all 
intercontinental ballistic missiles (ICBMs) and submarine 
launched ballistic missiles (SLBMs) deployed by the United 

(3) Installation by the Untied States of permissive action 
links (PALS) on all nuclear weapons at sea." 
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THE WHITE HOUSE 



WASHINGTON 



June 12, 1991 



Dear Mr. Presiden'ti: 

Enclosed are copies of the unclassified report assessing 
possible additional nuclear risk reduction measures requested 
by the Congress in section 1441 of the National Defense 
Authorization Act for Fiscal Year 1991 (Public Law 101-510) . 
Also enclosed is a classified annex to the report. 

The Administration is actively engaged in a variety of 
efforts to reduce further the risk of conflict between the 
United States and the U.S.S.R. After careful review of the 
measures specified by the Congress, the report has concluded 
that effective bilateral mechanisms are in place to address 
concerns such as nuclear terrorism and nuclear, chemical, and 
missile proliferation. Similarly, U.S. initiatives already 
have resulted in expanded use of the Nuclear Risk Reduction 

Centers (NRRCs) to transmit, information required . under 

additional arms control agreements. 

At the same time, our report has identified possible steps 
that were not mentioned in section 1441. These steps — 
expanding the conference facility available to the U.S. NRRC 
and establishing a government-to-government video conferencing 
facility located in the NRRCs ~ both require further internal 



review. 



Sincerely, 




The Honorable Dan Quayle 
President of the Senate 
Washington, D.C. 20510 
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THE WHITE HOUSE 

WASHI NGTON 

June 12, 1991 



Dear Hr. Speaker: 



Enclosed are copies of the unclassified report assessing 
possible additional nuclear risk reduction measures requested 
by the Congress in section 1441 of the National Defense 
Authorization Act for Fiscal Year 1991 (Public Law 101-510) . 
Also enclosed is a classified annex to the report. 

The Administration is actively engaged in a variety of 
efforts to reduce further the risk of conflict between the 
United States and the U.S.S«R. After careful review of the 
measures specified by the Congress, the report has concluded 
that effective bilateral mechanisms are in place to address 
concerns such as nuclear terrorism and nuclear, chemical, and 
missile proliferation. Similarly, U.S. initiatives already 
have resulted in expanded use of the Nuclear Risk Reduction 
Centers (NRRCs) to transmit information required under 
additional arms control agreements. 

At the same time, our report has identified possible steps 
that were not mentioned in section 1441. These steps — 
expanding the conference facility available to the U.S. NRRC 
and establishing a governme.nt-to-government video conferencing 
facility located in the NRRCs — both require further internal 
review. 

Sincerely, 




The Honorable Thomas S. Foley 
Speaker of the 

House of Representatives 
Washington, D.C. 20515 
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ASSESSMENT OF POSSIBLE ADDITIONAL NUCLEAR 



RISK REDUCTION MEASURES 



Section mux of the National Defense Authorization Act for 
Fiscal Year 1991 (P.L* 101-510) requests the President to "submit 
to Congress a report (In classified and unclassified form) assessing 
additional nuclear risk reduction, measures which could be Implemented 
pursuant to the (U.S. -USSR) joint statement of June 1, 1990. ..In- 
cluding the following: 

"(1) Assigning the Nuclear Risk Reduction Centers (NRRCs) 
such expanded roles as the following: 

Serving as a forum for discussions between the two 
nations on responding to possible nuclear terrorism. 

Transmitting notifications that may be required under 
future arms control treaties. 

Transmitting notifications and Information requests 
required under Article 5 of the 1971 Agreement on 
Measures to Reduce the Risk of Outbreak of Nuclear 
War Between the United States and the Union of Soviet 
Socialist Republics ("Accidents Measures" Agreement). 

Providing a forum for discussions between the United 
States and the Soviet Union on restricting nuclear, 
chemical, and missile proliferation. 

Serving as a meeting place for high-level military 
discussions on nuclear doctrines, forces and activities, 
and regional security concerns. 

"(2) Installation of post-launch destruct mechanisms on all 

Intercontinental ballistic missiles (ICBMs) and submarine 
launched ballistic missiles (SLBMs) deployed by the United 
States. 

"(3) Installation by the United States of permissive action 
links (PALs) on all nuclear weapons at sea." 

This report, prepared by the Secretary of Defense In coordination 
with the Joint Staff, Department of State, Arms Control and 
Disarmament Agency, Department of Energy, Director of Central 
Intelligence, and Director of the NRRC, responds to the Congressional 
request. Part I addresses questions related to possible additional 
roles for NRRCs, Part II addresses questions related to post-launch 
destruct mechanisms and PALs. Part III is a classified annex to 
the report. 



"(A) 
"(B) 
"(C) 

"(D) 
"(E) 



PART I: 



BACKGROUND 

As a result of an Initiative by the United States, President 
Reagan and General Secretary Gorbachev agreed at the November 
1985 Summit in Geneva to explore the possibility of establishing 
centers to reduce the risk of conflict between the United States 
and the USSR — in particular, the risk of nuclear war as a 
result of misinterpretation, miscalculation, or accident. Following 
a series of expert meetings and formal negotiations, the Agreement 
Between the United States of America and the Union of Soviet 
Socialist Republics on the Establishment of Nuclear Risk Reduction 
Centers (and Protocols thereto) was signed in Washington on September 
15, 1987, by Secretary of State Shultz and Foreign Minister 
Shevardnadze • 

Under the Agreement, which is of unlimited duration, each 
Party agreed to establish a Nuclear Risk Reduction Center (NRRC) 
in its capital and to establish a special facsimile link between 
these centers* NRRCs became operational on April 1, 1988. The 
U.S. NRRC is located in the Department of State and staffed by 
U.S. personnel. The Soviet NRRC is located in the Soviet Ministry 
of Defense and staffed by Soviet personnel. The Soviet NRRC 
operates as a counterpart to both the U.S. NRRC and the U.S« 
On-site Inspection Agency. 

NRRCs are intended to complement existing means of communication 
and provide direct, reliable, high-speed systems for transmitting 
notifications and communications at the Government-to-Government 
level. NRRCs can rapidly transmit full text and graphics in a 
disk-to-disk or facsimile format by direct satellite link. In 
this respect, NRRCs have a communications capability very similar 
to but separate from — the modernized Direct Communications 
Link (Hot Line), which is reserved for communications at the Head 
of Government level, i.e., be tween the President of the United 
States and his Soviet counterpart. 

It is important to note that NRRCs do not replace normal 
diplomatic channels of communication or the Hot Line; nor are 
they intended to have a crisis management role. The principal 
function of NRRCs is to exchange information and notifications as 
required under certain existing and possible future arms control 
and confidence-building agreements. 

There are two Protocols to the Agreement. Protocol I identifies 
notifications that the Parties agreed to exchange on NRRC satellite 
links. These include ballistic missile launch notifications 
required under Article 4 of the 1971. Agreement on Measures to 
Reduce the Risk of Outbreak of Nuclear War ("Accidents Measures" 



Agreement) and under paragraph 1 of Article VI of the 1972 Agreement 
on the Prevention of Incidents on and over the High Seas, The 
Agreement alao provides that the list of notifications transmitted 
through NRRCs may be altered by the Parties as relevant new 
agreements are reached. (Alterations to the list of notifications 
made since September 1987, and the prospects for future alterations, 
are are discussed below see section on "Transml t ting notifications 
that may be required under future arms control treaties.") The 
Parties may use NRRCS to transmit communications other than those 
specified under the Agreement "as a display of good will and with 
a view toward building confidence." 

Finally, to help ensure the smooth operation of NRRCs, the 
Agreement calls for regular meetings at least once a year between 
representatives of the two national centers to discuss operation 
of the system. 

ASSESSMENT OF ADDITIONAL ROLES FOR THE NRRCS 

The Administration has reviewed carefully the five possible 
additional NRRC roles specified In Section 1441. Our analysis 
and conclusions with regard to each of those five possibilities 
Is explained below. In addition, the Administration has Identified 
certain possible steps with regard to NRRCs that were not Identified 
in Section 1441. These steps merit further study by the 
Administration, and no final decisions have been made. 

(1 ) Using NRRCs "as a forum for discussions between the two 
nations on responding to possible nuclear terrorism." 

The United States has a longstanding and continuing commitment 
to prevent further spread of nuclear weapons, including their 
acquisition, fabrication, or possible use by subnatlonal groups 
or terrorist organizations. 

Internal U.S. efforts in this regard involve a broad spectrum 
of physical security, technological safeguards, personnel screening 
procedures, and emergency response measures designed to minimize 
absolutely the risks of any successful terrorist action directed 
against nuclear-related facilities in the United States or U.S. 
nuclear weapon-related activities (e.g., stockpiles or transshipment) 
overseas. These efforts are supported by a variety of programs 
aimed at Identifying, at the earliest possible time, any potential 
terrorist-related activity directed against U.S. or foreign 
nuclear-related assets. In addition, the United States participates 
in bilateral and multilateral arrangements — for example, within 
NATO designed to maintain the highest possible safety and 
security standards for U.S. nuclear weapon-related activities 
overseas, and to respond in a timely and effective manner In the 
event of a nuclear-related accident or Incident , including potential 
terrorist-related activity. It Is .clear, however, that details 
of such arrangements and contingency plans can involve extremely 



sensitive Information, protection of which Is of critical Importance 
to the national security of the United States and that of our 
closest friends and allies. 

Bilateral exchanges with the USSR on Issues related to 
nuclear non-proliferation, nuclear-weapons security, and Inter- 
national terrorism have taken place and will continue to take 
place In a variety of fora and locations (often outside national 
capitals), and at different levels — including ministerial-level 
discussions Involving the Secretary of State, Secretary of Defense, 
and their respective Soviet counterparts. Frequently, these 
exchanges Include various types of experts from several U.S. 
agencies, and take place within the context of meetings covering 
a much broader agenda of bilateral issues. In addition, steps 
have been taken in recent years to facilitate direct communications 
between the sides in the event of certain nuclear incidents (see 
(3) below). Thus, while a U.S. NRRC conference facility could 
serve as one of many possible venues for discussions with the 
USSR on issues related to nuclear terrorism (see section below on 
"Other possibilities under consideration") and the NRRC staff 
could provide administrative support for such a meeting, it would 
not be appropriate to make* the NRRC facility a principal or 
standing "forum" for such discussions, or involve the NRRC in 
substantive preparations for such discussions. 

in this context, the Administration believes that it would 
be inappropriate to expand the role of NRRCs to include substantive, 
functions such as U.S. -Soviet coordination or crisis management 
involving possible nuclear terrorism. Such a role was never 
contemplated by the sides during negotiation of the NRRC Agreement, 
and would run counter to deliberate U.S. policy decisions on the 
appropriate functions, staffing, and technical capabilities of 
the U.S. NRRC. The underlying rationale for these policy decisions 
is straightforward: transforming the NRRC into a substantive 
coordination or crisis management mechanism (e.g., for nuclear 
terrorism) could seriously jeopardize U.S. ability to protect 
sensitive information, conduct thorough Internal analysis and 
evaluation of any potential threat," reach policy decisions through 
existing and effective crisis-management mechanisms, and implement 
necessary countermeasures in coordination, as appropriate, with 
our friends and allies. 

(2) Transmitting notifications that may be required under 
future arms control treaties 

Since signature of the NRRC Agreement in September 1987 ^ the 
United States and USSR have agreed to use the NRRC to transmit 
information required under four additional arms control-related 
agreements : 



— Notifications required under the 1987. INF Treaty. These 
include, for example, data updates, inspection-related 
notices, requests for cooperative measures, and proposed 
meetings of the Special Verification Commission. As of 
February 1, 1991, a total of 5,3A8 such notifications 
have been exchanged through NRRCs* 

— Notifications under the 1988 Ballistic Missile Launch 
Notification Agreement, which provides that each side 
will notify the other, no less than 24 hours in advance, 
of the planned date, launch area, and area of impact for 
any launch of an ICBM or SLBM. As of February I, 1991, 

a total of 225 such notifications have been exchanged 
through NRRCs. 

— Notifications under the Threshold Test Ban Treaty (TTBT) 
and Peaceful Nuclear Explosions Treaty (PNET) and their new 
verification protocols, which were ratified and entered 
into force in 1990* These include advance notice of 
certain planned nuclear tests, information on test 
conditions, notices of movement of inspection personnel 
and their on-site monitoring equipment, and requests 

for meetings of the Bilateral and Joint Consultative 
Commissions. As of February 1, 1991, a total of 20 
such notifications have been exchanged through NRRCs. 

— Notifications under the 1990 O.S.-USSR Bilateral Chemical . 
Weapons Destruction Agreement. These include notifications 
regarding inspectors, aircrew members, and aircraft 
flight plans of the Inspecting Party. Information 
exchanged also will include notification of the intent 

to carry out an inspection and notifications regarding 

the transfer of chemical weapons pursuant to the Agreement. 

Although the START treaty has not yet been completed, it is 
anticipated that several types of notifications — including data 
updates, notices of movement of certain START-accountable systems, 
inspection-related information, cooperative measures, and proposed 
meetings of the Joint Compliance and Inspection Commission 
will be handled by the NRRCs. ^ This would increase significantly 
the volume of message traffic processed through NRRCs. 

By providing a direct, rapid, and reliable government-to- 
government communications link for transmitting such notifications 
(and clarifications of notifications, when necessary), NRRCs have 
contributed to U.S. efforts to verify Soviet compliance with and 
effectively implement new arms control agreements. In addition, 
NRRCs have been very useful in other instances. For example, 
pursuant to the Agreement's provision for "good will" notifications, 
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the sides have used NRRCs to transmit information on deorbiting 
satellites- Similarly, in the context of the 1989 agreement 
between the U.S. and USSR to exchange advance notifications of 
certain strategic military exercises, which resulted from Secretary 
of Defense Carlucci's proposal to Minister of Defense Yazov, the 
sides agreed to provide such notifications through NRRCs. 

Possible additional notification responsibilities for NRRCs 
will depend on the nature of new arms control and confidence- 
building measures agreements. In the case of the 1990 Conventional 
Forces in Europe (CFE) Treaty and Vienna Document on Confidence 
and Security Building Measures (CSBMs) Agreement, for example, 
the multilateral nature of the agreements and the notifications 
required therein means that the NRRC, a strictly bilateral link, 
cannot be the sole mechanism for the United States and USSR to 
provide necessary notifications. It may be advisable, however, 
to use the NRRC as a "back-up" link to ensure timely transmittal 
of CFE and CSBMs notifications between Washington and Moscow, 
while using other means — e.g.» existing diplomatic channels or 
a new, dedicated multilateral communications system under consideration 
among the parties to the Vienna Document — to provide notifi- 
cations to other treaty signatories. A multilateral CFE Communi- 
cations Center, under the supervision of the Director of the NRRC, 
Is currently being established within the Department of State. 

Of course, any expansion of the list of notifications provided 
through NRRCs must be agreed between the sides. The United 
States, for example, has responded positively to a Soviet suggestion 
to use NRRCs In the event time-urgent communications between 
capitals to help complement communications procedures established 
under the 1989 Agreement on the Prevention of Dangerous Military 
Activities. The USSR, however, has not followed through on the 
U.S. response. 

» 

(3) Transmitting non-urgent notifications and Information . 

requests required under Article 5 of the 1971 "Accidents 
Measures" Agreement . 

As a result of a U.S. initiative, the United States and USSR 
signed a Common Understanding to the "Accidents Measures" Agreement 
in June 1985. The Common Understanding clarifies their obligations 
to consult in the event of a nuclear Incident Involving unknown 
or unauthorized parties.^ 

Article 6 of the "Accidents Measures" Agreement specifies 
that the sides "shall make primary use" of the Hot line for 
"transmission of urgent information, notifications, and requests 
for Information In situations requiring prompt clarification." 
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While the United States does not exclude the possibility of using 
NRRCs for notifications required under Article 5, the United 
States sees no benefit in seeking an explicit agreement with the 
USSR — i.e., a change to the "Accidents Measures** or NRRC 
Agreements — for this purpose. Moreover, given the critical 
national security concerns that possibly would be raised with any 
nuclear incident relevant to the "Accidents Measures'* Agreement, 
use of the Uot line which remains, of course, a Presidential 
prerogative — may be advisable for both policy and operational 
reasons • 

(4) Providing a forum for U#S«-USSR discussions on restricting 
nuclear, chemical, and missile proliferation. 

As mentioned in (1) above, bilateral exchanges with the USSR 
on issues related to nuclear non-proliferation have taken place, 
and will continue to take place, in a variety of fora and locations 
(often outside national capitals), and at different levels. The 
same is true for exchangeis on restricting chemical weapons and 
missile proliferation. Frequently, these exchanges Include 
experts from several U.S. agencies, and take place within the 
context of meetings covering a much broader agenda of bilateral 
Issues. Thus, while a NRRC conference facility could serve as one 
of many possible venues for discussions with the USSR on prolifer- 
ation issues, and the NRRC staff could provide administrative 
support for such discussions, lack of a forum has not been an 
impediment to such discussions. It would not be appropriate to 
make the NRRC facility a principal or standing "forum" for such 
discussions, or involve the NRRC in substantive preparations for 
such discussions. 

( 5 ) Serving as a meeting place for high-level military discussions 
on nuclear doctrines, forces, activities, and regional 
security concerns . 

High-level defense official contacts and discussions involving 
the United States and USSR, including mllltary-to-military contacts, 
have Increased significantly in recent years. Examples of substantive 
meetings In 1990 Included the following: 

In January, the Chairman of the Joint Chiefs of Staff 
met with the Chief of the General Staff of the Soviet 
Armed Forces at the Vienna CSBM Conference discussions 
on military doctrine. 

In March, the first meeting of the Joint Military Commission 
(established by the Agreement on the Prevention of 
Dangerous Military Activities) met at MacDlll AFB, Florida. 

In May, the U.S. Delegation for the Incidents at Sea 
Agreement visited the USSR, as did the Assistant Secretary 
of the Air Force. 



— In June, the Principal Deputy Under Secretary of Defense 
for Policy met In Moscow with the Chairman of the Supreme 
Soviet Committee on Defense and State Security, as well 
as a senior military adviser to President Gorbachev. 

In September, the Chief of the General Staff of the 
Soviet Armed Forces visited the United States. 

— In October, the Secretary of Defense visited the USSR 
for meetings with the Soviet defense and political 
leadership, Including unprecedented visits to Soviet 
military facilities. 

— In November, the Chief of Staff of the U.S. Army visited 
the USSR. 

In December, members of the Joint Staff and Soviet General 
Staff conducted staff talks at the Pentagon. 

In addition, senior U.-S. defense and military representatives 
participate actively on U.S. delegations to a range of high-level 
bilateral meetings , Including summits, minis terlals , and arms 
control negotiation. Implementation and compliance fora. In 
fulfilling their roles on such delegations^ they frequently 
interact with counterpart s ..in the Soviet defease es tabllshLme.nt . 

Topics raised by both sides during such exchanges often 
include, but are not limited to, nuclear-related and doctrine 
issues. In addition, the substantive and confidence-building 
value of discussions between senior defense and military officials 
clearly has been enhanced by conducting such discussions in a 
wide variety of locations, including the Pentagon, U.S. and 
Soviet military bases, and other defense-related facilities. For 
these reasons* it would be inappropriate * and in some cases 
counterproductive, to seek to use NRRCs as a focal point for 
such discussions. 

OTHER POSSIBILITIES UNDER CONSIDERATION 

In reviewing the possible future role of the NRRCs, the 
Administration tentatively has identified two areas for further 
consideration. Both require further Internal review of their 
practicability, cost effectiveness, and security implications. 

One possibility would be to expand the conference facility 
available to the U.S. NRRC , which currently consists of a single 
conference room adjacent to the NRRC communications office in the 
Department of State. The purpose of this conference facility 
would be to provide a venue for the Increasing number of U.S. -Soviet 
meetings of officials and experts working on implementation and 
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compliance of arms control treaties* While the United States 
can find suitable meeting places, a NRRC facility might offer an 
economical and politically symbolic alternative. For example, an 
expanded NRRC conference facility could provide the administrative 
setting for meetings of the U.S. -USSR Coordinating Croup (a 
subgroup of the Bilateral Consultative Commission established by 
the TTBT), which must meet in Washington to coordinate U.S. and 
Soviet activities regarding Soviet in-country monitoring of U.S. 
nuclear tests^ Similarly, such a facility could provide a setting 
for appropriate meetings under the auspices of the Special Verifi- 
cation Commission established by the INF Treaty, or the Joint 
Compliance and Inspection Commission to be established under 
START. The meetings held in the NRRC cotiference facility would 
complement, not replace, meetings of such arms-control implementation 
and compliance-related bodies or components thereof that are more 
appropriately held in Geneva. Establishment of such a conference 
facility in the U.S. NRRC would not require agreement with the USSR. 

The second possibility would be to consider establishing a 
government-to-government video conferencing facility that would 
be located, for administrative purposes, in NRRCs. One purpose 
of such a facility would be to allow the sides to exchange views 
directly — for example, on issues that likely would not require 
protracted discussion and negotiation — without always necessitating 
time-consuming travel to the other's capital. Further technical 
analysis is required to determine the feasibility of this concept 
from the U.S. perspective If, after further analysis, such a 
concept were Judged to be worthwhile from policy, security, 
technology transfer, and cost perspectives, the United States 
could discuss It with the USSR at the appropriate time. 

PART II ; 

BACKGROUND ; 

Prevention of deliberate or Inadvertent use of a nuclear 
weapon without proper authorization by the President has always 
been a high priority for the federal agencies responsible to the 
President for nuclear weapon command, control, and safety. Since 
the inception of nuclear weapons, a wide range of positive measures 
to control their use has evolved. These positive measures include 
physical security, procedural control, design safety features, 
and electromechanical control systems. A major challenge in the 
application of positive measures is to "assure authorized use and 
assure against unauthorized use" of a nuclear weapon. Maintaining 
the necessary balance between these requirements involves detailed 
assessments of each weapon system. The most recent comprehensive 
review of nuclear control procedures and the positive measure* to 



3 See PART III annex 



.^10. 



ensure their safety was completed In 1986. That study concluded 
that the strengths and capabilities of the current system were 
appropriate, although some potential deficiencies could not be 
completely excluded. Since 1986, however, the International 
security environment has changed, possibly altering this balance 
and suggesting that e review of controls may be appropriate. In 
addition, advanced technology may have overcome the undesirable 
characteristics of older systems for command, control, and safety 
of nuclear weapons* 

( 1 ) Installing Post-Launch Destruct Mechanisms on all U.S. 
deployed ICBMs and SLBMs 

A preliminary examination of the issue of installation of 
post launch destruct mechanisms on Intercontinental ballistic 
missiles (ICBMs) and submarine launched ballistic missiles (SLBMs) 
has been conducted. Installation of a post launch destruct 
system could provide an additional safeguard against unauthorized 
or accidental launch of a nuclear weapon. However, such a system 
could also introduce unacceptable vulnerabilities into the US 
Nuclear Command and Control^ System to include: enemy penetration 
of the safeguards; unintentional or accidental activation of the 
system by the operators; or a system malfunction that could 
disrupt an authorized missile launch. These vulnerabilities may 
seriously affect the ability of the United States to employ these 
strategic systems, which would undermine their deterrent value. 

Post-launch destruct devices provide only one means of 
mitigating the consequences of an unauthorized or inadvertent 
launch. Another candidate for reducing this risk would be a 
ballistic missile defense system. Indeed, the President has 
directed that the Strategic Defense Initiative program be refocused 
on accomplishing a revised set pf mission objectives for an 
initial U.S. Strategic Defense System. Such a system, known as 
Global Protection Against Limited Strikes (GPALS) will have as 
its objective the protection of the United States, our forward 
deployed and power projection forces, and our friends and allies, 
from limited ballistic missile attacks. Irrespective of their source. 
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(U) This section contains additional Information of a 
classified nature. The numbered paragraphs correspond to 
footnoted references In the unclassified text. 




(n) Installing Permissive Action Links (PALs) on all 
VmSm Nuclear Weapons at Sea> 
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LISTING OF OUTSIDE VIEWS AND STUDIES 



3 Sep 91 



18 Oct 91 
5 Nov 91 



19 Nov 91 

2 Dec 91 
2 Apr 92 
30 Apr 92 
15 May 92 
2 Jul 92 



Outside Views 

Permissive Action Links on SLBMs 
and TLAM(N)s (Woolsey Report) 
Briefing 

Views on Nuclear Failsafe and Risk 
Reduction 

Views on Soviet NC2 

Nuclear Weapons Safely 

Views on Remote Destruct of 
Nuclear Missiles 

Views on Nuclear Failsafe and Risk 
Reduction 

Nuclear Weapons Safety Study 
Views on Post Launch Destruct 
Views on Post Launch Destruct 
Views on Post Launch Destruct 
Views on Failsafe and P^sk Reduction 



Amb James Woolsey 

Dr. Richard Brody 

Dr. Bruce Blair 

Dr. John Foster 

Dr. Sherman Frankel 

Dr. A. Wohlstetter 

Dr. Sidney Drell 
Dr. Kosta Tsipis 
Dr. Pochard Garwin 
Dr. Sherman Frankel 
Dr. Fred Ikle 



Previous Outside Studies Reviewed 

• President's Blue Ribbon Task Group on Nuclear Weapons Program 
Management (Clark) Report - July 1985 

• Nuclear Weapons Safety Management Process Review (Moe), 
February 1990 

• House Armed Services Committee Panel on Nuclear Weapons Safety 
(Drell) Report. December 1990 



S ECRET - RESTRICTED DATA 



Abnormal 
Environments 



Access (Classified 
Information) 



Access (NC2 
Materials) 



Access (Nuclear 
Weapons) 



Access Control 



Accident 



Accident 
Response Group 
(ARG) 



Accountability 



Accreditation 



Active Protection 



(U) Environments in which a weapon system and warhead are 
not expected to retain full operational reliability, but must 
maintain the standards of safety set forth in the applicable 
requirements documents. Abnormal environments are those 
outside the levels specified for normal environments in the 
stockpile-to-target sequence document. They may occur either 
singly or in credible combinations. 

(U) The ability and opportunity to obtain knowledge of classified 
Information. An Individual, In fact, may have access to 
classified Information by being In a place where such 
Information is kept, if the security measures that are in force do 
not prevent him from gaining knowledge of such information. 

(U) The capability and opportunity to handle or control positive 
control material or to obtain prior to an authorized procedure, 
alter, or substitute the intemal values of positive control 
material used in the execution and release of nuclear or chemical 
weapons. (See "unauthorized access.") 

(U) Close physical or electrical proximity to a nuclear weapon in 
such a maimer as to allow the opportunity to tamper with or 
damage a nuclear weapon. For example, a person would not be 
considered to have access if an escort or a guard were provided 
for either the person or the weapon when the person is in close 
proximity to the weapon. 

(U) Use of procedures and/ or physical devices to permit 
authorized access and deny unauthorized access to a nuclear 
weapon. 

(U) Any unplanned occurrence involving loss or destruction of, 
or serious damage to, nuclear weapon systems, nuclear weapons, 
or nuclear components that results in an actual or potential 
threat to national security or to life and property. 

(U) The Department of Energy (DOE) Accident Response Group 
consists of qualified scientific, medical, and technical personnel 
and specialized equipment designated to execute DOE*s response 
operations upon notification of a nuclear accident /incident. 

(U) The property that enables activities on an Automated 
Information Systems to be traced to individuals who may then be 
held responsible for their actions. 

tU) A formal declaration by the DAA that the Automated 
Information System is approved to operate in a particular 
security mode using a prescribed set of safeguards. Accreditation 
is the ofTlclal management authorization for operation of an AIS 
and is based on the certification process as well as other 
management consideration. The accreditation statement affixes 
security responsibility with the Designated Approving Authority 
(DAA) and shows that due care has been taken for security. 

(U) Concept of a use control system that senses attempts to gain 
unauthorized access to weapon components, with option to 
respond with a "penalty" of some sort, e.g., disablement. 
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tU) A permissive action link (PAU system that senses and 
responds to unauthorized Intrusions with an appropriate penalty, 
usually weapon disablement. 




(U) An Indivldual(s) who deliberately plans a malevolent act(s) 
Involving a nuclear weapon or nuclear explosive device, 

(U) A removal from emplojanent, suspension from emplojrment 
of more than 14 days, reduction in grade, reduction In pay, or 
furlough of 30 days or less. 

tU) A field qualified team of health physicists and health 
physics technicians established at the USAF Occupational and 
Environmental Health Laboratory (USAF OEHL). The team Is 
capable of responding worldwide with air transportable 
equipment to radiation accidents/incidents, providing on-site 
health physics consultation and instrumentation for the 
detection, identification, and quantification of any possible 
radiation hazard. 

(U) A collection of RADIAC equipment, spare parts, and trained 
Instrument repair technicians maintained in an alert status by 
the Air Force Materiel Command for airlift to the scene of a 
nuclear weapon accident/incident to supplement the local 
RADIAC equipment and repair capability. 

(U) A specified area, physically located within the boundaries of 
designated areas where nuclear weapons are stored, maintained, 
or on alert, in which the master site intrusion detection alarm, 
perimeter, structure, and facility alarm annunciators are located. 
(See Site Security Contrpl Center.) 

(U) Any Irresponsible use of an alcoholic beverage causing 
misconduct or unacceptable social behavior, or impairing work 
performance, physical or mental health, financial responsibility, 
or personal relationships. - - 

(U) A designated permanent land-based area where dellveiy 
systems containing nuclear weapons are located and are postured 
for immediate reaction. 

(U) An Army team possessing an alpha radiation monitoring 
capability. The team Is Identtfled usually as part of a Nuclear 
Accident and Incident Control (NAIC) Team 

(U) Items especially constructed or procured for the handling, 
transport, storage, etc., of nuclear weapons or their parts. 
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(U) A panel designated by the General Counsel. DOD, or designee 
to make final determinations in cases which are appealed. 

(U) A person in industry who requires a security clearance for 
access to classified information and any U.S. citizen who is a 
direct-hire employee or selectee for a position with NATO and 
who requires NATO certificates of Security Clearance, security 
assurances for access to U.S. or foreign classified information, or 
Red Cross or USO personnel nominated for assignment with the 
Military Services overseas. The term applicant does not apply to 
those U.S. citizens who are seconded to NATO by U.S. 
Departments and Agencies or to U.S. citizens recmited through 
such agencies in response to a request from NATO. 

tU) A Military Senrlce-designated commander with authority in 
a specific geographical area. 

(U) A COMSEC custodian within a command who receives 
packages of positive control material for follow-on delivery to 
designated using custodians or who, when tasked, places such 
material in storage. 

(U) The configuration of a nuclear weapon in which a single 
signal initiates the action for a nuclear detonation. 

(U) Readying a nuclear weapon so that a fuzing signal will 
operate the firing' system; includes operation or reversal of safing 
items. 

(U) Process by which the National Command Authority is 
provided, with high confidence, information on the nature of the 
event that has occurred (authorized or unauthorized, nuclear or 
conventional, multiple or single events). (Note: This definition 
applies specifically to the Remote Destruct process.) 

(U) A measure of confidence that the security features and 
architecture of an Automated Information System (AIS) 
accurately mediate and enforce the security policy. If the security 
features of an AIS are relied on to protect classified or sensitive 
unclassified information and restrict user access, the features 
must be tested to ensure that the security policy is enforced and 
may not be circumvented during AIS operation. 
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(U) Activities, equipment, and facilities of the Department of 
Defense used or engaged in support of the following: 

• CU) Development, production, testing, sampling, maintenance, 
repair, modification, assembly, utilization, transportation, or 
retirement of nuclear weapons or nuclear weapon components. 

• (U) Production, utilizaUon, or transportation of DoD SNM for 
military applications. 

• (U) Safeguarding of activities, equipment, or facilities that 
support the functions in definitions above, including the 
protection of nuclear weapons, nuclear weapon components, or 
DoD SNM for mlUtary appUcatlons at a fixed facility or In 
transit. 

(U) An independent review and examination of system records 
and activities to test for adequacy of system controls, to ensure 
compUance with established policy and operational procedures, 
and to recommend any indicated changes in controls, policy, or 
procedures. 

(U) Additional military personnel (or units) trained, equipped, 
and capable of augmenting a security force as required. 

(U) (DoD) A security measure designed to protect a 
communications, system against a fraudulent transmission or 
simulation by establishing the validity of a transmission, 
message, or originator. 

(U) A ciyptosystem or a cryptographic process used for 
authentication. 

(U) DoD: A symbol or group of symbols, or a series of bits, 
selected or derived in a prearranged marmer and usually inserted 
at a predetermined point within a message or transmission for 
the purpose of attesting to the validity of the message or 
transmission. 

(U) NATO: A letter, numeral, or group of letters or numerals, or 
both, attesting to the authenticity of a message or transmission. 




(U) A person who is properly cleared, trained, and screened for 
the Nuclear or Chemical Weapons Persormel Reliability Program 
in accordance with DoD Directives 5210.42 or 5210.65 and who 
has formal authorization in writing, granted by the PRP 
certifying authority, for access to positive control material used 
in the control of nuclear and chemical weapons. 

(U) An assembly of computer hardware, software, and/or 
firmware configured to collect, create, communicate, compute, 
disseminate, process, store, and/or control data or information. 
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(U) Measures and controls that safeguard or protect an AIS 
against unauthorized (accidental or intentional) disclosure, 
modification, or destruction of AIS and data, and denial of 
service. AIS security includes consideration of all hardware 
and/or software functions, characteristics, and/or features: 
operational procedures, accountability procedures, and access 
controls at the central computer facility, remote computer, and 
terminal facilities: management constraints: physical structures 
and devices: and personnel and communication controls needed 
to provide an acceptable level of risk for the AIS and for the data 
and information contained in the AIS. It includes the totality of 
security safeguards needed to provide an acceptable protection 
level for an AIS and for data handled by AIS. 

(U) A programmable microprocessor used for PAL recede, code 
check, lock, unlock, and APS operations in support of PAL 
devices. 
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(U) A hidden means of accessing software /firmware that permits 
the program originator/other person to gain access to the 
program without doing so through the normal means. Also see 
Trap Door and Trojan Horse. 

tU) (In connection with health protection). The background 
count includes radiation produced by naturally occurring 
radioactivity and cosmic rays. 

(U) A personnel security investigation consisting of both record 
reviews and interviews with sources of information as prescribed 
in paragraph 3, Appendix B, this Regulation, covering the most 
recent 5 years of an individuars life or since the 18th birthday, 
whichever is shorter, provided that at least the last 2 years are 
covered and that no investigation will be conducted prior to an 
individual's 16th birthday. 

(U) Radiation arising from radioactive material other than the 
one under consideration. Background radiation due to cosmic 
rays and natural radioactivity is always present. 

(U) A coordinated series of obstacles designed or employed to 
canalize, direct, restrict, delay, or stop the movement of an 
intruding force. 

(U) A CJCS temi used in the DoD to identify and report a nuclear 
incident involving a nuclear weapon/warhead, nuclear 
components or vehicle when nuclear loaded. In the Army and 
Air Force, this term includes a "significant incident" as defined 
in DoD Directive 5100.52. See nuclear weapon incident. 

(U) A CJCS term to identify and report an accident involving a 
nuclear weapon/ warhead or nuclear component. See nuclear 
weapon(s) accident. 

(U) Material not designated EFFECTIVE or RESERVE. 

(U) Circumvention of a PAL or disablement system; does not 
include obtaining unauthorized access to control codes. 
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(U) Withdrawing a nuclear control order not yet acted upon. 

(U) A grouping of classified or sensitive unclassified information 
to which an addiUonal restrictive label is applied for signifying 
that personnel are grated access to the information only if they 
have formal access approval or other applicable authorization 
(e.g., proprietary information, for official use only, 
compartmented information). 

(U) A determination by the applicable Service that a unit is 
capable of perfomiing its assigned nuclear mission. Army 
accomplishes this by Nuclear Surety Inspection: Navy by Nuclear 
Weapons Acceptance Inspection; and Air Force by Nuclear Surety 
Inspection. 

(U) The technical evaluation of an Automated Information 
Systems security features and other safeguards, made in support 
of the accreditation process, which established the extent that a 
particular Automated Information Systems design and 
implementation meet a set of specified security requirements. 

(D) For military and DoD civilian personnel, the commander, or 
designee, responsible for the operation or security, or both, of 
nuclear weapons, in a PRP position allowing sufficient personal 
contact with all personnel to permit continual evaluation. For 
DoD contractor personnel, the DoD official designated in the 
contract. 

(U) Official information or material that requires protection In 
the Interests of national security and that is classified for such 
purpose by appropriate classifying authority in accordance with 
the provisions of Executive Order 12356 (reference (j)). 

(U) A split-knowledge S-FRD code placed in the PAL of a nuclear 
weapon during shipment. Classified logistic codes are obtained 
from NSA-produced numerical master lists, or memory phrases, 
PROMs, SDMs, and PDMs for recede operations. Such codes are 
controlled by DNA with special guidance published in TP 50-2. 

tU) Information or material subject to the control of the US 
Government encompassing both US national defense and foreign 
relations that has been determined pursuant to Executive Order 
12356 (reference (c)) to require protection against unauthorized 
disclosure, and that is so designated. 

(U) A microprocessor-based coded PAL device with the capability 
of either plain text or encrypted code operations. 

(U) An unclassified alphanumeric sequence, consisting of two 
letters and three digits, corresponding to the PAL code. 

(U) A device, subsystem, or system included in or attached to a 
warhead, weapon, or weapon system to preclude or delay arming, 
launching, release, or nuclear detonation until after insertion of 
a discrete code or combination. 
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(U) A team composed of four HQ STRATCOM custodian 
personnel who are responsible for management of coded-switch 
operation. The team will be divided into A and B sections, with a 
minimum of two persons (E-7 or above) in each section. 



(U) A command and control concept in which the discrete code or 
combination required to operate a coded control device is held at 
an echelon above the delivery unit until after nuclear release or 
imlock has been directed by competent authority. 

(U) All equipment and related peripheral equipment (i.e., cable, 
connectors, power supplies, etc.) whose main purpose is to 
process, transfer, temporarily store, or verify operational code 
values in nuclear weapons. Two classes of this equipment are 
recoders and decoders. 

fU) A person who, by reason of official duties, has been 
authorized access to nuclear command and control 
communications or would have the opportunity, by any means, 
to gain access to nuclear command and control communications 
security material. 

(U) The Cognizant Federal Agency is that Federal agency having 
custody of the weapon at the time of the accident. The CFA is 
responsible to: 

• (U) Conduct and manage Federal on-site actions. 

• (U) Develop or evaluate recommendations for public protective 
action measures off site* 

• (U) Present recommendations- for off-site protective action 
measures, in accordance with FEMA, to the appropriate State 
and /or local officials of Foreign government. 

• (U) Coordinate initially the release of information to the 
public. Congress, and the White House until transferred to FEMA 
by mutual agreement. 

(U) The unified, specified, theater, or Service component major 
command responsible for determining and coordinating the 
requirements of subordinate forces to hold two-person material 
controlled by another authority or command. The command 
approving authority approves all two-person control systems 
used, possessed, or controlled by forces within a command. 
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Commimicate (U) The ability to alert higher authority that an event has 

occurred, facilitate assessment of that event, transmit a decision 
to destroy or not destroy, and provide verification of destruction. 
(Note: This definition applies specifically to the Remote Destruct 
process.) 

Communications (U) Measures taken to deny unauthorized persons information 
Security derived from telecommunications of the United States 

(COMSEC) Government concerning national security and to ensure the 

authenticity of such telecommunications. Note: 
Communications security includes crypto-security, transmission 
security, emission security, and physical security of COMSEC 
n:iatenal and COMSEC information. 
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Medical 
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Compromise 
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Computer 

Computer 



(U) A team of response and local experts that operates out of the 
Joint Information Center (JIC) and is available to assist the local 
community. 



(U) A US military medical officer or a US civilian physician 
employed by the the US Government, responsible for providing 
medial services or clinical evaluations as specified by the 
Certifying Oflicial and, when appropriate, the Reviewing Official. 

(U) The component commander and all individuals, units, 
detachments, organizations, or installations under his 
operational command that have been assigned to the operational 
conmiand of the commander of a unified or combined command. 




(U) A violation of the security system such that aii unauthorized 
disclosure of sensitive information has occurred. 

tU) A machine capable of accepting, performing calculations on, 
or otherwise manipulating or storing data. It usually consists of 
arithmetic and logical units and a control unit, and may have 
input and output devices and storage devices. 

(U) Code: Frequently a synonym for a computer program: also 
part of a program. 

(U) Program: A compilation of coded instructions for 
performing a sequence of tasks on a computer. 

(U) Subprogram: Part of a computer program: usually the 
calculation of one aspect of a more complex routine. 
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(U) Management of changes maide to a system's hardware, 
software, firmware, documentation, and/or facilities throughout 
the development and operational life of the system. For FARR 
purposes, configuration control is not concerned with the 
development plans. 

(U) Provide a distinct signature that a destruction mechanism 
has functioned that can be verified by both the US and other 
parties. (Note: This definition applies specifically to the Remote 
Destruct process.) 

(U) A box or enclosure capable of containing radiation. 

tU) The deposit and/or absorption of radioactive material, 
biological, or chemical agents or hazardous materials on, and by, 
structures, areas, personnel, or objects. 

(U) Procedures to avoid, reduce, remove, or render harmless, 
temporarily or permanently, nuclear, biological, chemical agents 
and hazardous materials contamination. 



Contamination 
Control Line 
(CCL) 



Contamination 
Control Station 
(CCS) 



Contemporary 
Risk Reduction 
Measures 



Contingency PAL 
System 



(U) A control line surrounding the radiological control area. 
Initially, the contamination control line extends 100 meters 
beyond the known/ suspected radiological contamination to 
provide a measure of safety. Once the contamination control 
station Is operational, this line Is the outer boundary that 
separates the reduced hazard area from the clean area. 

(U) An area (tent or facility) specifically designated for 
controlling ingress and egress of personnel and equipment 
to/from the radiation control area. The outer boundary of the 
Contamination Control Station is the contamination control 
line, and the inner boundaiy is the line segment labeled the hot 
line. 

(U) General categories of activities that are currently used a 
confidence building measures between potential adversaries: 
communications, consultations, "rules of the road" for military 
activities, and predictability measures. 
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(U) A position whose Incumbent, because of assigned nuclear 
duties: 



Controlling 
Authority 



(U) Has access but not technical knowledge, as defined herein; or 

CU) Controls entry into an Exclusion Area (see definition) but 
does not have access or technical knowledge, as defined herein; 
or 

(U) Is armed, assigned duties relating to nuclear security, and In 
a direct line of sight to a nuclear weapon and could inflict 
damage upon the weapon or, when joined, to its delivery system, 
or 

tU) Has been designated as a Certifying Ofllcial at operational 
unit level or first level Certifying Official in staff activities with 
identified PRP positions at the Controlled level only. 
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Countexmeasures 



Critical 

Communloations 
FaciUty 



Critical 
Equipment 



Critical 
FaclUties 



(U) Information gathered and activities conducted to protect 
against espionage and other clandestine intelligence activities, 
sabotage, international terrorist activities, or assassinations 
conducted for or on behalf of foreign powers, organizations, or 
persons. 

tU) Actions taken to defeat or degrade performance of a nuclear 
weapon on its way to the target. In the SAF&F context, concern 
is normally with electrical or electronic countermeasures or 
Jamming. 

(U) A communications facility that is essential to the continuity 
of operations of the National Command Authority (NCA) during 
national emergencies, and other nodal points or elements 
designated as crucial to mission accomplishment. 

(U) Specifically designated equipment, including software, used 
to buUd, encode, decode, transmit, or receive emergency action 
messages; that identify nuclear targets, select nuclear weapons to 
be used against specific targets, and route nuclear-weapons- 
carrying platforms to appropriate launch points; support or 
inhibit delivery, arming, fuzing, and firing of the nuclear 
weapons themselves; positive control material and devices; and 
nuclear weapons hardware. 

(U) Specifically designated facilities provided for principal NC2 
decision-makers, and key personnel and/ or functions in the 
chain of command, from which, by acting in concert, all 
essential NC2 functions can be performed expeditiously 
throughout all phases of nuclear conflict. 
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(U) A network, facility, system, node, or services that are of such 
importance that total loss, disruption, or severe damage could 
result in loss of function or unacceptable impairment of: 
integrated tactical warning and attack assessment system 
(including emergency conferencing); high-level decision 
disseminating means (including terrestrial, radio frequency or 
satellite means): SIOP force tracking (including world-wide 
Military Command & Control System (WWMCCS) and Nuclear 
Planning and Execution System (NPES)): and nuclear weapon 
components, nuclear weapons, and nuclear weapon systems, 
including associated control, control equipment and materials, 
facilities, and transportation means. 

tU) TOP SECRET RESTRICTED DATA or SECRET RESTRICTED 
DATA revealing the theory of operation or design of the 
components of a thermonuclear or implosion-type fission bomb, 
warhead, demolition munition, or test device. Specifically 
excluded is information concerning arming, fuzing, and firing 
systems, limited life components, and totally contained 
quantities of fissionable, fussionable, and high explosive 
materials by type. Among excluded items are the components 
which Service personnel set, maintain, operate, test, or replace. 

Critical Position (U) A position whose incumbent, because of assigned nuclear 

duties: 

• (U) Has access'and technical knowledge as defined herein: or 

• (U) Can, at battalion, squadron, ship level, or below, either 
directly or indirectly cause the launch or use of a nuclear 
weapon; or 

• (U) Controls or uses sealed authenticators, permissive action 
link (PAL) materials, related codes, strategic missile computer 
tapes, emergency action messages, or release procedures for 
nuclear weapons: or 

• (U) Has been designated as a Certifying OfTicial at operational 
unit level or first level Certifying Official in staff activities with 
identified Critical PRP positions. 



Critical NC2 
Component 



Critical Nuclear 
Weapon Design 
Information 
(CNWDI) 



Cross-Reference 
Sheets 



Cryptographic 
Information 



(U) A printed product relating the short titles of encrypted 
combinations contained on a specific APC PROM to the 
identifying data needed to retrieve those combinations. 

(U) All information significantly descriptive of cryptographic 
techniques and processes or of cryptographic systems and 
equipment, or their functions and capabilities, and all 
cryptomaterial. ("Significantly descriptive" means that the 
information could, if made known to unauthorized persons, 
permit recovery of specific cryptographic features of classified 
crypto-equipment. reveal weaknesses of associated equipment 
that would allow recovery of plain text or of key. aid materially 
in the cryptoanalysis of a general or specific cryptosystem, or 
lead to the cryptoanalysis of an individual message, command, 
or authentication.) 
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Cumulative Dose 
(Radiation) 

Custodial 
Commander 



Custodial 
Detachment 



Custodial 
FaciUties 

Custodial Unit 



Custodian 



Custody 
Data 

Data Integrity 



Data Transport 
Device (DTD) 



(U) The total dose resulting from repeated exposure to radiation 
in the same region, or of the whole body. 

(U) A commander responsible for maintaining custody, 
guardianship, and safekeeping of nuclear weapons and their 
components and of source and special nuclear materials. 

CU) A United States (US) unit which maintains custody of nuclear 
weapons for use by a non-US delivery unit and acts in support of 
that unit. A custodial detachment may also maintain 
accountability for nuclear weapons in its custody. 

CU) Those structures or rooms utilized by on-duty US personnel 
responsible for the custody of nuclear weapons. 

(U) A US forces unit responsible for the control of, transfer and 
movement of, and access to, nuclear and chemical weapons and 
components. 

(U) He who has: 

• (U) Responsibility for the control of, transfer and movement 
of, and access to nuclear weapons and nuclear components; 

• (U) Responsibility for the control, certification, modification, 
and/or application of a trusted computing base of related codes: 

• (U) Responsibility for certification, movement, repair, and/or 
modification of NC2 systems/facilities. 

tU) The responsibility for the control of, transfer and movement 
of, and access to nuclear weapons and nuclear components. 

(U) A representation of facts, concepts, information, or 
instructions suitable for communication, interpretation, or 
processing by humans or by an Automated Information Systems. 

(U) The state that exists when data is unchanged from its source 
and accidentally or maliciously has not been modified, altered, 
or destroyed. 



,.-^*f^s-.<i;'-i; 



Debris 
Decoder 

Decontamination 



tU) Residue from detonation of a weapon, plus radioactive 
materials from its environment. 

(U) A type of controller: e.g., the T1535 decoder, which is capable 
of generating the appropriate coded switch message to cause 
unlocking or locking, and for Active Protective System state 
control. 

(U) The process of making any person, object, or area safe by 
absorbing, destroying, neutralizing, making harmless, or 
removing hazardous materials clinging to or around it. 
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Decontamination 
Station 



Dedicated 
Security Mode 



Defeat / 
Circumvention 



Defense Courier 
Service Couriers 



Defense Nuclear 
Agency (DNA) 
Surveillance 
Inspections 
Deficiency 



Delay 



Deliberate 
Unauthorized 
Laimch Analysis 

Delivery Unit 



Delivery Vehicle 
Denial of Service 



Deplos^ment 



(U) A building or location equipped and organized to cleanse 
personnel and material of chemical, biological, or radiological 
contaminants. 

(U) A mode of operation wherein all users have the clearance or 
authorization and need-to-know for all data handled by the 
Automated Information Systems. If the Automated Information 
Systems processes special access information, all users require 
formal access approval. In the dedicated mode, an Automated 
Infomiation Systems may handle a single classification level 
and/or category of information or a range of classification levels 
and/or categories. 

(U) Actions taken overtly or covertly to overcome the (1) use 
control system of a nuclear weapon or weapon system, (2) 
processing of NC2-criUcal information, or (3) physical security of 
an NC2 system/facility. 

(U) TOP SECRET-cleared personnel of the US Armed Forces 
assigned to a courier station to perform DCS duties and identified 
by possession of a DCS identification card. 

(U) DNA inspections which consist of the observation and 
evaluation of Service inspection teams while they are performing 
the NWn portion of Service inspections. 

(U) A variance from procedures or criteria prescribed in 
pertinent technical publications or other Service publications 
which directly implement DoD requirements. 

(U) The effect achieved by physical features, technical devices, or 
security measures and forces that impedes an adversary from 
gaining access to a nuclear weapon. Normally expressed as a 
function of time, it is a major consideration in the design and 
development of nuclear weapon security systems. 

(U) See Unauthorized Use Analysis (UUA). 



(U) A unit with the weapon system, command and control, 
logistics, and security to cause a weapon to be fired or launched 
at a target. 

(U) The portion of a weapon system that delivers a nuclear 
weapon to its target; usually a missile or aircraft. 

Action or actions that result in the inability of an Automated 
Information Systems or any essential part to perform its 
designated mission, either by loss or degradation of operational 
capability. 

(U) Moving nuclear or chemical weapons, or nuclear- or 
chemical-equipped delivery systems to designated areas in order 
to achieve a better posture. 
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Depot Storage 
Code 



Designated 
Approving 
Authority (DAA) 



Designated 
Couriers 



Designated 
Nuclear 
Command and 
Control 
Personnel 



Destroy 
Destruction 



Detection 



Detonation 



Detonator 



(U) A split-knowledge classified code placed in the PAL of a 
nuclear weapon during temporary storage where operational 
codes are not required. Depot codes are either (1) locally 
developed numerical codes or combinations, (2) obtained from 
NSA-produced numerical master lists, or (3) memory phrases 
used with NSA-provided PROMS, SDMs. or PDMs. Depot storage 
codes are controlled by DNA. 

(U) The official who has the authority to decide on accepting the 
security safeguards prescribed for an Automated Information 
Systems or the official who may be responsible for issuing an 
accreditation statement that records the decision to accept those 
safeguards. The DAA must be at an organizational level, have 
authority to evaluate the overall mission requirements of the 
Automated Information Systems, and to provide definitive 
directions to Automated Information Systems developers or 
owners relative to the risk in the security posture of the 
Automated Information Systems. 

(U) Properly cleared and briefed commissioned, warrant, and 
noncommissioned officers of the US Armed Forces in travel 
status who are designated by DCS personnel acting for the 
Commander, DCS, to act as couriers to deliver classified material 
between a DCS station and an addressee or another DCS station. 

(U) These include, but are not necessarily limited to, those 
personnel with access to the NC2 coding and authentication 
processes and a communications medium necessary to transmit 
release, execution, or termination orders: those personnel 
Involved in the preparation and production of NC2 coding and 
authentication documents and equipment, those personnel 
involved in preparation and production of nuclear weapons 
targeting tapes and materials; and those maintenance and 
security personnel who could have adverse impact on system 
performance for nodes and equipment that represent near-single- 
point-failure elements for the NC2 system. 

(U) See Remote Destruct. 

(U) Physically destroying SAS, PAL, CSS, or PES material. 
Violent destruction (i.e., one-point detonation of the weapon's 
high explosive) of nuclear weapons and/ or nuclear components to 
render the weapon useless, 

(U) Process that determines that the launch or release of a 
nuclear-capable system or a nuclear-armed weapon has occurred. 
(Note: This definition applies specifically to the Remote Destruct 
process.) 

(U) A stable explosive process characterized by the existence of a 
shock- initiated chemical reaction that, in tum, supplies the 
energy to support the shock:. 

(U) In this guide, an electroexplosive device designed to produce a 
detonation in response to an applied electric current. 
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Dial-A-Tleld 
(DAY) 

Disablement 



Dlsassociation 



Disaster Control 



Disaster Control 
Officer (DCO) , 



Disaster Cordon 



Disaster 
Preparedness 




Disaster 
Response Force 
(DRF) 

Dispersal 
Dispersal Site 
DoD Component 
DoD Personnel 



Dose Rate 
Contour Line 



— {CFRD)- 



(U) An action, such as damaging a component, that prevents a 
nuclear weapon from achieving a significant yield unless it is 
renovated. 

(U) The act of rendering a nuclear weapon incapable of achieving 
a nuclear yield by removing critical components for storage 
elsewhere. The act is reversible. 

(U) Measures taken before, during, or after hostile action, 
natural or man-made disasters, to reduce the probability of 
damage, minimize its effects, and initiate recovery. 

(U) The DCO is the DoD point of contact with FEMA at the 
disaster scene for providing DoD support to disaster recovery 
operations. 

(U) A physical barrier surrounding the accident scene where 
control is established to preclude unauthorized entiy. 

(U) That series of actions to control and manage nuclear 
incidents and bring them to a practicable conclusion within the 
established security, response, and recovery framework. These 
actions include initial and subsequent reporting response. 
Explosive Ordnance Disposal procedural action on the weapon(s), 
appropriate security, legal and medical aspects, public 
information, and control of hazards caused by the accident. 
Control of the accident caused hazards include: survey of the 
incident/accident area to establish isodose lines and all types of 
monitoring; personnel and area decontamination; disposition of 
nuclear, high explosive, and contamination items. 

(U) The USAF base level organization which responds to 
disasters/accidents, responsible for establishing command and 
control, and to support disaster operations. 



(U) An area or installation used by forces during periods of alert, 
mobilization, or armed conflict to diminish vulnerability of 
units to detection and attack. 

(U) Includes the Office of the Secretary of Defense; the Military 
Departments, Organization of the Joint Chiefs of Staff; Directors 
of Defense Agencies and the Unified and Specified Corhmands. 

(U) Active duty military personnel, active civil service employees 
of the Department of Defense, or DoD contractors and their 
employees. 

(U) A line on a map, diagram, or overlay Joining all points at 
which the radiation dose rate at a given time is the same. 
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Drug Abuse 
DT 

Duress System 



EdlUon 



Effective Edition 



Effects 



Electromagnetic 
Pulse CEMP) 

Electronic 
Seciuity Systems 
(ESS) 



Emergency 



Emergency 
Destruction 



Emergency 
Security Forces 

Entrance 
National Agency 
Check (ENTNAC) 



tU) The illegal, wrongful, or Improper use of any narcotic 
substance, cannabis, or other controlled substance or the illegal 
or wrongful possession, transfer, or sale of same. 

(U) Deuterium, tritium, or a mixture of the two. 

(U) A method by which personnel authorized entry into 
Exclusion Areas, and those who authorize entry into, or escort 
visitors into Limited or Exclusion Areas, can covertly 
communicate a situation of duress to a security control center or 
other operating or security personnel who will notify a security 
control center. 




CU) An edition of sealed authenUcators, PAL, CSS, or PES 

material that a controlling authority has designated to be used in 
authentication of nuclear or chemical control orders or unlock of 
nuclear weapon systems. 

(U) All phenomena resulting from the energy outputs of a nuclear 
explosion. 

tU) A strong pulse of electromagnetic radiation (EMR), with a rise 
time of about 10*® second, resulting from a nuclear explosion. 

(U) That part of physical security concerned with the 
safeguarding of personnel and property by use of electronic 
systems. These systems include, but are not limited to, intrusion 
detections systems (IDS), automated entry control systems 
(AECS), and video assessment systems. 

(U) An unexpected occurrence or set of unexpected circumstances 
in which personnel or equipment unavailability, due to accident, 
natural event, or combat, may demand immediate action that 
may require extraordinary measures to protect, handle, service, 
transport, or employ a nuclear weapon. 

tU) The destruction of nuclear munitions, components, and 
associated classified material, without significant nuclear yield, 
to render a weapon tactically useless. 

(U) Those designated reinforcing security personnel to include all 
response forces. 

(U) A personnel security investigation scoped and conducted in 
the same manner as a National Agency Check except that a 
technical fingerprint search of the files of the Federal Bureau of 
Investigation is not conducted. 
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Escalation 
Control 



Evaluated 
Products List 
(EPL) 

Evaluation 
Authority 

Exception 



Exclusion Area 



Exercise SAS, 
PAL, CSS/ or PES 



Explosive 
Ordnance 



Explosive 
Ordnance 
Disposal (EOD) 



Explosive 
Ordnance 
Disposal Incident 



tU) The concept of limiting the level, scope, or intensity of a 
conflict to reduce the probability of a massive USSR response. 
The objective of escalation control is prompt war termination at 
the lowest level of conflict possible on temis favorable to the 
Unites States. 

(U) A documented inventory of equipments, hardware, software, 
and/or firmware that have been evaluated against the evaluation 
criteria found in DoDD 5200.28-STD. 

(U) The controlling authority or the NSA, as apphcable. who has 
responsibility for evaluating possible compromises. 

(U) An approved permanent deviation from the provisions of 
this manual (DoDD 52 10.4 IM, Sep 87) that creates a security 
vulnerability. 

(U) A designated area immediately surrounding one or more 
nuclear weapons /systems. Normally, the boundaries of the area 
are the walls, floors, and ceiling of a structure or are delineated 
by a permanent or temporary barrier. In the absence of positive 
preventative measures, access to the Exclusion Area constitutes 
access to the nuclear weapon(s)/systems. 

(U) A system, bearing the short title USCXS-, that parallels its 
operational counterpart and is used in exercises as directed by 
the controlling authority. 

(U) All munitions containing explosives, nuclear fission, or 
fusion materials and biological and chemical agents. This 
ordnance includes bombs and warheads, guided and ballistic 
missiles; artillery, mortar, rocket, and small arms ammunition. 
Also, ordnance includes all mines, torpedoes, and depth charges; 
pyrotechnics; clusters and dispensers; cartridges and propellant 
actuated devices; electro-explosive devices: clandestine and 
improvised explosive devices; and all similar or related items or 
components explosive in nature. 

(U) The detection, identification, field evaluation, rendering-safe, 
and/or disposal of explosive ordnance which has become 
hazardous by damage or deterioration when the disposal of such 
explosive ordnance is beyond the capabilities of personnel 
assigned to routine disposal. 

(U) The suspected or detected presence of unexploded ordnance, or 
damaged explosive ordnance, which constitutes a hazard to 
operations, installation, personnel, or material. Not included in 
this definition are the accidental arming or other conditions that 
develop during the manufacture of high explosive material, 
technical service assembly operations, or the laying of mines and 
demolition charges. 
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Explosive 
Ordnance 
Disposal 
Procedures 



Explosive 
Ordnance 
Disposal Unit 



Explosive 
Ordnance 
Reconnaissance 



Exposure 



FaciUty 



Failsafe 



Failsafe 
Measures 



False Alarm 

Federal 
Coordinating 
Officer (FCO) 
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(U) Those particular courses or modes of action for access to, 
recover, rendering-safe, and final disposal of explosive ordnance 
or any hazardous material associated with an explosive ordnance 
disposal incident. 

(U) Access Procedures. Those actions to locate exactly and to 
gain access to unexploded ordnance. 

(U) Recovery Procedures. Those actions to recover unexploded 
ordnance. 

(U) Render Safe Procedures. The portion of the explosive 
ordnance disposal procedures involving the application of special 
explosive ordnance disposal methods and told to provide the 
interruption of functions or separation of essential components 
of unexploded ordnance to prevent an unacceptable detonation. 

(U) Final Disposal Procedures. The final disposal of explosive 
ordnance by explosive ordnance disposal personnel, which may 
include demolition or burning in place, removal to a disposal 
area, or other appropriate means. 

(U) Personnel with special training and equipment who render 
explosive ordnance (such as bombs, mines, projectiles, and booby 
traps) safe, make intelligence reports on such ordnance, and 
supervise the safe removal thereof. 

(U) Reconnaissance involving the investigation, detection, 
location, marking, iniUal identification, and reporting of 
suspected unexploded ordnance, by explosive ordnance 
reconnaissance agents, to determine further action. 

tU) The exposure at a given point is a measurement of radiation 
in relation to its ability to produce ionization. 

(U) A physical plant, such as real estate and improvements 
thereto, including buildings and equipment. 

(U) Feature of a system or device which autoniatically activates 
an alarm in the event a component part of the system is removed 
or when a component part or portion of the circuit malfunctions 
or loses power. Restoration to normal operation is not possible 
until the fault is corrected. 

(U) That combination of safety, security, and control procedures 
and equipment intended to prevent mistaken authorized use, 
unauthorized use, inadvertent use, or loss of nuclear weapons or 
to interrupt, terminate or mitigate the results of such action 
should one occur. These are unilateral actions that need 
not /should not be communicated to others to be effective. 

(U) An alarm without a known cause. 

(U) The Federal official appointed by the President upon 
declaration of a major disaster or emergency under Public Law 
93-288 to coordinate the overall Federal response. 
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Federal 
Emergency 
Management 
Agency (FEMA) 



Federal 
Radiological 
Emergency 
Response Plan 
(FRERP) 

Federal 
Radiological 
Monitoring and 
Assessment 
Center (FRMAC) 



Federal 
Radiological 
Monitoring and 
Assessment Plan 
(FRMAP) 

Federal Response 
Center (FRC) 



(U) This agency establishes Federal policies for and coordinates 
all civil defense and civil emergency planning, management, 
mitigation, and assistance functions of executive agencies. 
FEMA assists local and state agencies in their emergency 
planning. Its primary role in a nuclear weapon accident is one of 
coordinating Federal, state, local, and volunteer response 
actions. 

(U) Emergency Information and Coordination Center (EICC): The 
EICC is located in FEMA Headquarters in Washington. D.C. and 
provides overall direction, control and coordination of Federal 
and state emergency services response/recovery to a radiological 
accident or emergency. 

(U) Emergency Response Team (ERT): The FEMA team deployed 
to a radiological emergency scene by the FEMA Director to make 
an initial assessment of the situation and then provide FEMA's 
primary response capability. 

(U) Emergency Support Team (EST): The FEMA Headquarters 
Team that carries out notification activation and coordination 
procedures from the FEMA EICC. The EST is responsible for 
Federal agency headquarters coordination, staff support of the 
FEMA Director, and support of the SFO. 

tU) The Federal plan to assist State and local government 
officials or other Federal agencies in the response to a 
radiological emergency in the US, its possessions and territories. 



(U) A center established near the scene of a radiological 
emergency responsible for off-site radiological response from 
which the FRMAC Director conducts FRMAP response. This 
center need not be located near the on-site or Federal-State 
operations centers as long as its operations can be coordinated 
with them. Staffed by DOE NV. 

(U) A plan to provide coordinated radiological monitoring and 
assessment assistance to the State and local governments in 
response to radiological emergencies. This plan, authorized by 
44 CFR Part 351, supersedes the Interagency Radiological 
Assistance Plan. 

tU) The on-site focal point established by the Senior FEMA 
Official (SFO). as required, for coordinating the Federal response 
to a nuclear weapon accident or significant incident. 
Representatives of other Federal, state, local, and volunteer 
agencies will be located in the center. 
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Firebreak 



Firing 



Fissile Fuel or 
Material 

Fissionable Fuel 
or Material 



Foreign 
Intelligence 

Formal Access 
Approval 

Formal 
Authorization 



Formerly 
Restricted Data 
(FRD) 



Fuzing 
Handled By 

Handling 




Hardening 



(U) Provision, normally by a .firing set, of the proper electrical 
energy to fire a nuclear assembly's detonator system. 

(U) A heavy Isotope capable of undergoing fission by neutrons of 
any energy: isotopes such as ^^'^U, 235u, and ^^^Pu. 

tU) A heavy isotope capable of undergoing fission by some 
process: in a weapon context, materials such as ^^^U that have a 
fission threshold above 1 MeV for neutrons. 

(U) Information relating to the capabilities, intentions, and 
activities of foreign powers, organizations, or persons. 

(U) Documented approval by a data owner to allow access to a 
particular category of infomiation. 

tU) Designation in writing by an appropriate PRP certifying 
authority or agency for access to handle SAS or PAL, CSS, or 
PES material. 

(U) Information removed from the Restricted Data category upon 
determination jointly by the Department of Energy and 
Department of Defense that such information relates primarily 
to the military utilization of atomic weapons and that such 
information can be safeguarded adequately as national security 
information (Section 142d, Atomic Energy Act of 1954, as 
amended). 

(U) Generating a signal that, in an armed nuclear weapon, will 
operate the firing system. 

(U) The term "handled by" denotes the activities performed on 
data in an Automated Information Systems, such as collecting, 
processing, transferring, storing, retrieving, sorting, 
transmitting, disseminating, and controlling. 

(U) That phase of weapon logistics wherein weapons are 
physically manipulated directly or indirectly by people. 
(Characterized as lifting, sliding, hoisting, lowering, or moving 
an item on dollies or pallets over short distances through the use 
of manpower, tugs, cranes, forklifts, and hoists.) 

(U) Measures taken in the design and fabrication of a weapon or 
its parts to reduce their vulnerability. 



20 



— SECRET— RESTRICTED DATA 



— SECRET — RESTRICTED DATA — 



Hardness 



Hazardous 
Materials 



Hazards of 
Electromagnetic 
Radiation to 
Ordnance (HERO) 

Head of DoD 
Component 



High-Altitude 
Bursts 

High-Altitude 
Phenomenology 



Hot Spot 



Implosion 

Detonation 

System 

Improvised 
Nuclear Device 
(IND) Incident 



Inadvertent Use 



Inadvertent Use 
Analysis 



(U) The degree of resistance of a weapon or its components to 
adverse environments, particularly the effects of a defensive 
nuclear burst. 

(U) Any material that is flammable, corrosive, an oxidizing 
agent, explosive, toxic, poisonous, etiological, radioactive, 
nuclear, unduly magnetic, a chemical agent, biological research 
material, compressed gases, or any other material that, because 
of its quantity, properties, or packaging, may endanger human 
life or property. 

(U) Hazardous electromagnetic radiation to which a weapon 
system containing an electroexplosive device might by subjected 
and emanates from a source which is not an integral part of the 
weapon system. 

(U) The Secretary of Defense; the Secretaries of the Military 
Departments; the Chairman of the Joint Chiefs of Staff; and the 
Commanders of Unified and Specified Commands; and the 
Directors of Defense Agencies. 

(U) See Joint Pub. 1-02. 



(U) Effects of nuclear explosions that occur above 250,000 feet. 



(U) The region In a contaminated area in which the level of 
radioactive contamination is considerably greater than in 
neighboring regions in the area. "HOT SPOT* also refers to the 
DOE Accident Mobile Counting Laboratory and Mobile Support 
Equipment. 

(U) A system that commences with circuits carrying electrical 
energy from the firing set and terminates with the units that 
detonate the main HE charge, including HE, air, or ring lenses. 

(U) Is an event resulting from a deliberate act, involving nuclear 
weapons or nuclear materials which include the sabotage, 
seizure, theft, or loss of a nuclear weapon or radiological nuclear 
weapon component or the fabrication and employment of an IND 
or a credible threat of either. 

(U) An individual or series of technical malfunctions, acts of 
God, or human errors, or combinations thereof, that result in an 
unplanned and unauthorized launch, release, firing, detonation, 
or Jettison of a nuclear weapon. 

(U) Methodology for analyzing technical malfunctions, acts of 
God, and human errors that could result in an inadvertent use of 
a nuclear weapon. Usually based on a fault tree analysis or 
probabilistic risk analysis approach. May or may not be 
quantitative. Identifies what can go wrong, how likely is it to 
occur, and what will be the probable outcome. 



21 

SEGRET - RESTRICTED DATA — 



Incident 



Independent 
Assessment 



Independent 
Power Source 

Indoctrinated 



Information 



Information 
System Security 
Officer (ISSO) 



Information 
Systems 



Initial Response 
Force (IRF) 



SECRET — R£STRIGTED4>A3^ 



(U) An unexpected event involving a nuclear weapon system, a 
nuclear weapon, or a nuclear component resulting in any of the 
following, but not constituting an accident: 

• (U) An increase in the possibility of an explosion or 
radioactive contamination. 

• (U) Errors committed in the assembly, testing, loading, or 
transportation of equipment, or the malfunctioning of 
equipment and material that could lead to an unintentional 
operation of the weapon arming and firing sequence. 

• (U) Damage to the nuclear weapon or the nuclear component 
due to any natural occurrence, unfavorable environment, or 
other condition. 

(U) An analysis of hardware, system, software, or firmware done 
by persons or organizations other than those who either (1) 
designed it, (2) are responsible for its day-to-day functioning, or 
(3) sponsor the effort that normally assesses it. 

(U) A power source, normally battery, independent of any other 
source. 

to) Personnel cleared for Confidential access and briefed 
regarding the continuous handling and/or observation and 
recovery procedures specific to VCP. 

(U) Knowledge such as facts, data, or opinions, including 
numerical, graphic, or narrative forms, whether oral or 
maintained in any medium. 

(U) The person responsible to the DAA for ensuring the security 
is provided for and implemented throughout the life cycle of an 
Automated Information Systems from the beginning of the 
concept development phase through its design, development, 
operation, maintenance, and secure disposal. 

(U) The organized collection, processing, transmission, and 
dissemination of information in accordance with defined 
procedures, whether automated or manual. 

(U) An element, whose capabilities are listed in the Nuclear 
Accident Response Capabilities Listing (NARCL), belonging to 
DoD or DOE installations, facilities, or activities, which would 
take emergency response actions necessary to maintain 
command and control on-site pending arrival of the Service or 
agency response force. Functions which the initial response 
force is tasked to perform (within its capabilities), are: 

• Rescue operations 

• Accident site security 

• Fireflghting 

• Initiation of appropriate EOD procedures 

• Radiation monitoring 

• Establishment of command, control, and communications 

• Public affairs activities 
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Insensitive High 
Explosive (IHE) 



Insider 



Installations 



Intelligent 
Terminal 



Interim Security 
Clearance 



Intrinsic 

Radiation 

(INRAD) 

Intrusion 
Detection System 
(IDS) 



Joint 

Communications 
Support Element 
(JCSE) 

Joint 

Communications 
Contingency 
Station Assets 

Joint Hazard 
Evaluation 
Center (JHEC) 

Joint 

Information 
Center (JIC) 



tU) HE that requires a shock of more than usual strength to 
cause detonation: this relative Insensitivlty contributes to 
weapon safety. 

tU) A person who, by reason of official duties, has knowledge 
and /or position that would significantly enhance the likelihood 
of successful bypass or defeat of positive measures should that 
person attempt such an action. See also Cognizant Agent and 
Third Party Agent. 

(U) Real DoD properties including bases, stations, forts, depots, 
arsenals, plants (both contractor and Government operated), 
hospitals, terminals, and other special mission facilities, as well 
as Uiose used primarily for military purposes. 

(U) A terminal that is programmable, able to accept peripheral 
devices, able to connect with other terminals or computers, able 
to accept additional memory, or which may be modified to have 
these characteristics. 

CU) A security clearance based on the completion of minimum 
investigative requirements, which is granted on a temporary 
basis, pending the completion of the full investigative 
requirements. 

(U) Any radiation emitted through the outer surface of a nuclear 
weapon in its normal storage condition. 



(U) An alarm system consisting of sensor(s) capable of detecting 
one or more types of phenomena, signal media, annunciator(s), 
and energy source, for signalling the entry or attempted entry of 
a person or other target into the area protected by the system. 

(U) A communications element that provides high frequency, 
very high frequency, secure and super high frequency satellite 
terminals and other equipment. 



(U) The communications station provides high frequency radio, 
tropospheric scatter terminals, automatic digital network 
terminals, manual secure voice and other equipment. 



CU) A facility, staffed by representatives from each of the 
agencies conducting hazard survey data and radiological 
safety/health physics matters on-site. 

(U) A facility at the scene of a nuclear weapon accident or 
significant incident to coordinate all public affairs. The JIC 
includes representation from DOE, DoD, FEMA, DoS, and other 
Federal agencies, as well as state, local, and/or foreign 
governments. 
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Joint Nuclear 
Accident 
Ccx>rdinating 
Center (JNACC) 



Joint Nuclear 
Weapon 
Publication 
System (JNWPS) 



Joint Test 
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Material 



Limited Access 
Authorization 



(U) The DoD and DOE operate coordinating centers for 
exchanging and maintaining information about radiological 
assistance capabilities and activities. These centers are 
separated geographically, but linked by direct communications 
networks. 

tU) The JNWPS is a system of technical manuals on nuclear 
weapons and associated materiel and such supplemental 
information or data determined appropriate by either the DoD or 
the Department of Energy (DOE) in connection with the general 
field of nuclear weapons. The JNWPS exists as a means of 
providing to the DOE, DNA, and to the respective DoD military 
departments (Army, Navy and Air Force), authoritative 
instructions and procedural data on the technical aspects of 
nuclear weapons and associated equipment to supplement 
existing publication systems of the participating 
agencies/Services. 

(U) A DOE-developed configuration based on DOE-DoD 
requirements for use in a joint flight test program, composed of a 
Joint-test subassembly and war reserve weapon components. The 
physical appearance and characteristics of a JTA will 
approximate a war reserve configuration to the extent 
practicable. JTAs are produced in two ways: 

• (U) Prebuild: For weapon systems whose design requires the 
JTAs to be completely prebuilt as new production. 

• (U) Rebtdld: Using components from stockpiled war reserve 
weapons plus Joint-test subassemblies from new production. 

(U) Energy equivalent to that released by the explosion of 1000 
tons of TNT, 10^2 calories, or 4.18 x 10^2 joules: a measure of 
yield. 

(U) Movement of nuclear weapons and dual-capable aircraft from 
a main operating base to outlying, contingency operating bases: a 
method of enhancing survivability in the event of increased 
tension or hostilities. 

(U) Propulsion of a missile with a nuclear warhead into 
controlled flight or uncontrolled flight beyond the immediate 
area of the launch site. 

(U) Source material, special nuclear material received, possessed, 
used, or transferred under a general or specific license issued by 
the Nuclear Regulatory Commission or a state. 

(U) Authorization for access to CONFIDENTIAL or SECRET 
information granted to non-United States citizens and 
immigrant aliens, which is limited to only that information 
necessary to the successful accomplishment of their assigned 
duties and based on a background investigation scoped for 10 
years. 
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Limited Area 



Limited-Life 
Component (LLC) 



Lock 



Logistic 
Movement 



Logistic System 



Maintenance 
FaciUties 



Maximum 
Permissible Dose 



Maximum 
Readiness 

Megaton (Mt) 



Memory Phrase 



Memory Phrase 
Envelopes 



Military 

Characteristics 

(MCs) 



(U) A designated area immediately surrounding one or more 
Exclusion Area(s) : normally, this is between the boundaries of 
Exclusion Area(s) and the outer or inner barrier or boundary of 
the perimeter security system. 

(U) A weapon component that deteriorates in some respect over 
time, and must be replaced periodically during weapon stockpile 
life; principal classes of LLCs are reservoirs, neutron generators, 
and parachutes. 

(U) The act of rendering a nuclear weapon incapable of achieving 
a nuclear yield by the application or activaUon of a positive 
control device. The act is reversible. 

(U) The transport of war reserve (WR) nuclear weapons by any 
appropriate noncombat delivery vehicle outside a permanent 
limited/exclusion area. 

(U) The organizations, vehicles, and support equipment 
employed for the loading, movement and transfer of nuclear 
weapons and nuclear components (except limited life components 
(LLC's)), but explicitly excluding nuclear-capable combat delivery 
vehicles. 

(U) Those buildings or structures in which nuclear weapon ' 
inspections, checkout, assembly, or maintenance operations are 
performed. 

tU) That radiation dose which a military commander or other 
appropriate authority may prescribe as the limiting cumulative 
radiation dose to be received over a specific period of time by 
members of the command, consistent with operational military 
considerations. 




(U) Energy equivalent to that released by the explosion of 
1,000,000 tons of TNT, 10^^ calories, or 4.18 x 10^^ Joules: a 
measure of yield. 

(U) A split-knowledge classified phrase Inserted into APC to 
access stored encrypted information contained in data files. 
Memory phrase use allows performance of code operations. 

(U) Printed products containing classified English-language 
phrases used as cryptograhic keying data by the APC*s crypto 
logic. Two memory phrases are required for each APC PROM 
data file. MP envelopes are produced, handled, and used under 
two-person control, split-knowledge conditions. 

(U) A document, developed for each nuclear weapon, that states 
the performance requirements and physical characteristics for 
those parts of a nuclear weapon that are the sole responsibility of 
the DOE to design, develop, certify, and produce. They begin as a 
statement of desired DoD performance objectives and become 
design requirements only after formal acceptance by the DOE. 
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Mistaken 
Authorized Use 



Modified Alert 
Force 



Monitoring 



Multilevel 
Security Mode 



Multiple-Code 
Coded Switch 



tU) A launch, release, or transfer for use of nuclear weapons, 
authorized by the National Command Authority, resulting from a 
decision based upon reporting of erroneous warning data, 
misinterpretation of warning data, or miscalculation of the 
intentions of a potentially hostile nation. 




to) The act of detecting the presence of radiation and the 
measurement thereof with radiation measuring instruments. 

(U) A mode of operation that allows two or more classification 
levels of information to be processed simultaneously within the 
same system when not all users have a clearance or formal 
iaccess approval for all data handled by the Automated 
Information Systems. 



National Agency 
Check (NAC) 



National 
Command 
Authorities 
(NCA) 

National Defense 
Area (NDA) 



(U) A personnel security investigation consisting of a records 
review of certain national agencies as prescribed in paragraph 1, 
Appendix B, this Regulation, Including a technical fingerprint 
search of the files of the Federal Bureau of Investigation (FBI). 

tU) See Joint Pub 1-02, 1 Dec 89 



(U) An area established on non-Federal lands located within the 
United States, Its possessions, or territories, for the purpose of 
safeguarding classified defense information, or protecting DoD 
equipment and /or material. Establishment of a National 
Defense Area temporarily places such non-Federal lands under 
the effective control of the DoD and results only from an 
emergency event. The senior DoD representative at the scene will 
define the boundary, mark it with a physical barrier, and post 
warning signs. The landowner's consent and cooperation will be 
obtained whenever possible; however, military necessity will 
dictate the final decision regarding location, shape, and size of 
the NDA. 
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Nationai 
Military 
Command 
System (NMCS) 



National 
Security 

National 
Security Area 
(NSA) 



Need-to-Know 



Network 



(U) Designed to support the President and the Secretary of 
Defense in exercising their responsibilities for the direction of 
US Armed Forces and the Chairman of the Joint Chiefs of Staff 
In executing his responsibilities. The NMCS consists of facilities 
Including the National Military Command Center, the Alternate 
National Military Command Center, the National Emergency 
Airbome Command Post, and other command centers that may 
be designated by the Secretary of Defense. The NMCS also 
includes data processing systems and networks, display systems, 
communications systems, procedures and persormel. 

(U) National security means the national defense and foreign 
relations of the United States. 

tU) An area established on non-Federal lands located within the 
United States, its possessions, or territories, for safeguarding 
classified information, and/or restricted data or equipment or 
material belonging to DOE. Establishment of an NSA 
temporarily places such non-Federal lands under the effective 
control of the DOE and results only from an emergency event. 
The senior DOE representative having custody of the material at 
the scene shall define the boundary, mark it with a physical 
barrier, and post warning signs. The landowner's consent and 
cooperation shall be obtained whenever possible; however, 
operational necessity shall dictate the final decision regarding 
location, shape and size of the NSA. 

(U) A criterion in security procedures which requires the 
custodians of classified information to establish, prior to 
disclosure, that the intended recipient must have access to the 
information to perform his official duties. 

(U) A network Is composed of a communications medium and all 
components attached to that medium whose responsibility is the 
transference of information. Such components may include 
Automated Information Systems, packet switches, 
telecommunications controllers, key distribution centers, and 
technical control devices. 



No-Knowledge 



No-Knowledge 
Recode 



(U) Cypher materials produced, controlled and stored so no 
individual is knowledgeable of the cypher values. 

(U) Changing the PAL codes by use of key split-knowledge 
memory phrases, APC, and PROM, SDM, or PDM files without 
operator knowledge of the codes being introduced into the PAL 
device. 



Noncombat 
Delivery Vehicle 



Nonsealed 

Authentication 

System 



(U) Any vehicle used for the movement of nuclear weapons, but 
not the subject of specific nuclear safety mles approved by the 
Secretary of Defense in accordance with DoD Directive 3150.2, 
"Safety Studies and Reviews of Nuclear Weapons Systems." 
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Nonstrategic 
Nuclear Forces 
(NSNF) 



Nonviolent 

Disablement 

(NVD) 



(U) Those nuclear-capable forces, located in an area of military 
operations, with a capability to employ nuclear weapons by land, 
sea, or air forces against opposing forces, supporting 
installations, or facilities. Such forces may be employed, when 
authorized by competent authority, to support operations that 
contribute to the accomplishment of the military commander's 
mission within the theater of operations. This term shall be 
used instead of the term "theater nuclear forces (TNF)/' 

(U) Nuclear weapon disablement which, through the destruction 
or disassociation of one or more key components, temporarily 
destroys a weapon's ability to be used in its intended mode. NVD 
may not preclude the weapon's ability to be used in other than its 
intended mode. The effects of NVD are confined to the weapon 
case or the weapon shipping and storage container. Methods of 
NVD Include: 



Normal 
Environments 



NSNF Security 



NSNF 

Survivability 



NSNF 

Survivability 
and Security (S2) 
Scope 



NSNF Weapon 
Systems 



• Disassociation 

• Destruction of components 

• Command Disablement (CD) 

(U) The expected logistical and operational environments 
defined in the stockpile-to-target sequence document that the 
weapon system is required to survive without degradation in 
operational reliability. 

(U) The protection of all mission-essential NSNF assets to 
prevent the theft or diversion and/or the unauthorized 
detonation of a tactical nuclear weapon or component, and to 
prevent unauthorized access to and/or damage and/or sabotage to 
a tactical nuclear weapon or component. 

(U) The capability of NSNF and NSNF supporting systems and 
facilities to endure in order to maintain the ability to execute 
their assigned missions. 

(U) That scope apphes to all of the following: 

• (U) All Mission-Essential Assets . Personnel, equipment, 
facilities, nuclear and nonnuclear elements of weapon systems, 
and weapon systems support. 

• (U) The Entire Threat Spectrum . Unconventional, 
conventional, chemical, and nuclear. 

• (U) All Force Postures . Nondispersed and/ or nondeployed, 
dispersing and/or deploying, and dispersed and/or deployed. 

• (U) Doctrine. Organization. Procedures. Training, and 
Eouipment. 

(U) Includes the nuclear weapon, a means of delivering it to the 
target, associated support equipment (facilities, etc.), and 
personnel. 
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Nuclear Accident 
and Incident 
Control Team 
(NAIC) 



Nuclear Accident 
Response 
Capabilities 
Listing (NARCL) 

Nuclear 

Assembly System 
(NAS) 



Nuclear Certified 
Computer Data 



Nuclear 
Command and 
Control (NC2) 



Nuclear 
Command and 
Control System 
(NCCS) 



Nuclear 
Components 



Nuclear 
Contribution 



(U) An Army team organized to minimize and prevent the loss of 
life, personal injury, hazardous effects, and destruction of 
property, to secure classified material, and to enhance and 
maintain the public*s confidence in the Army's ability to respond 
effectively to a nuclear accident or incident. 

(U) A listing of DoD and DOE installations, facilities, or 
activities with nuclear accident/incident response and radiation 
detection capabilities. 



• (U) For implosion-assembled weapons: The HE, pit (Including 
nuclear components and internal initiator, if present), nuclear 
saflng system, and detonators, but not fuzing components, firing 
sets, cables, external initiators, or reservoirs. 

• (U) For gun-assembled weapons: The gun barrel, propellant 
assembly and igniter, nuclear components, initiator, and tamper. 




(U) The exercise of authority and direction by the President, as 
Commander in Chief, through established command lines, over 
nuclear weapon operations of military forces; as Chief Executive 
over all government activities that support those operations: and 
as Head of State over required multinational actions that support 
those operations. 

(U) The designated combination of flexible and enduring 
elements including facilities, equipment, communications, 
procedures, personnel, and the structure in which these elements 
are integrated, all of which are essential for planning, directing, 
and controlling nuclear weapon operations of military forces and 
the activities that support those operations. 

(U) Weapon components composed of fissionable or fusionable 
materials that contribute substantially to nuclear energy released 
during detonation. These include boosting materials but not 
initiator materials. 

(XJ) Explosive energy released by nuclear fission or fusion 
reactions, as part of the total energy released by the accidental 
explosion of a nuclear weapon. Any nuclear contribution 
equivalent to four or more pounds of TNT is considered 
significant, and would add beta and gamma radiation hazards to 
other radiological and toxic hazards present at a nuclear weapon 
accident site. 
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Nuclear Control 
Order 



Nuclear 

Detonation 

(NUDET) 

Nuclear 
Emergency 
Search Team 
(NEST) 

Nuclear 
Radiation 



Nuclear Safety 
Nuclear Safing 

Nuclear Security 
Nuclear Weapon 



Nuclear Weapon 
Accident 



(U) A decrypted emergency action message, in the proper format, 
properly authenticated, and containing information consistent 
with known preplaimed data authorizing actions affecting 
nuclear weapons. 

(U) A nuclear explosion resulting from fission of fusion 
reactions in nuclear materials, such as from a nuclear weapon. 



tU) The NEST is a DOE asset with specialized equipment for 
conducting radiation survey and detection, field 
communications, EOD support, bomb/weapon diagnostics, hazard 
prediction, damage mitigation, and decontamination. 

(U) Particulate and electromagnetic radiation emitted from 
atomic nuclei in various nuclear process. The Important nuclear 
radiations, from the weapons standpolnt,are alpha and beta 
particles, gamma ray, and neutrons. All nuclear radiations are 
ionizing radiations, but the converse is not true. 

(U) Collection of measures to protect nuclear weapon systems 
against the risks and threats Inherent in their environment. 

(U) The prevention of a nuclear yield in the event of accidental 
detonation of the HE of a high explosive assembly weapon or 
ignition of the propellant of a gun assembly weapon. 

tU) Collection of measures taken to protect physical items and 
information and to prevent deliberate damage to, disruption of, 
or loss of any element of the nuclear command and control 
system or nuclear weapon program. 

(U) A device in which the explosion results ifrom the energy 
released by reactions involving" atomic nuclei, either fission or 
fusion, or both. 

(U) An unexpected event involving nuclear weapons or nuclear 
components that results in any of the following: 

• (U) Accidental or unauthorized launching, firing, or use by US 
forces or US supported allied forces of a nuclear capable weapons 
system. 

• (U) An accidental, unauthorized, or unexplained nuclear 
detonation. 

• (U) Non-nuclear detonation or burning of a nuclear weapon or 
nuclear component. 

• (U) Radioactive contamination. 

• (U) Jettisoning of a nuclear weapon or nuclear component. 

• (U) Public hazard, actual or perceived. 
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Nuclear Weapon 
Incident 



Nuclear Weapon 
Movement - 



Nuclear Weapon 
Personnel 
ReUabiUty 
Program (PRP) 

Nuclear Weapon 
Safety Standards 



Nuclear Weapon 
Safety Study 
Group (NWSSG) 



(U) An unexpected event Involving a nuclear weapon, facility, or 
component resulting in any of the following, but not constituting 
a nuclear weapon(s) accident: 

• (U) An increase in the possibility of explosion or radioactive 
contamination. 

• (U) Errors committed in the assembly, testing, loading, or 
transportation of equipment, and/or the malfunctioning of 
equipment and material which could lead to an unintentional 
operation of all or part of the weapon arming and/or firing 
sequence, or which could lead to a substantial change in yield, or 
increased dud probability. 

• (U) Any act of God, unfavorable environment, or condition 
resulting in damage to a weapon, facility, or component. 

CU) The transport of nuclear weapons by any appropriate 
noncombat delivery vehicle will be as follows: 

• (U) Logistic Movement. All movement of nuclear weapons and 
nuclear components by a noncombat vehicle, from the secure 
environment of a storage or alert area, not conducted in response 
to an increased readiness condition or wartime emergency plan. 

• (U) Tactical Movement. That movement of nuclear weapons or 
nuclear components made to support emergency plans or an alert 
posture during an increased readiness condition which 
authorizes a unit to remove nuclear weapons from their storage 
configuration in preparation for deployment to other locations. 

(U) The program which establishes personnel reliability 
standards for individuals performing duties associated with 
nuclear weapons. 



(U) There shall be positive measures to prevent nuclear weapons 
involved in accidents or incidents, or jettisoned weapons from 
producing a nuclear yield. 

(U) There shall be positive measures to prevent deliberate 
prearming. arming, launching, firing, or releasing of nuclear 
weapons, except upon execution of emergency war orders or when 
directed by competent authority. 

(U) There shall be positive measures to prevent inadvertent 
prearming. arming, launching, firing or releasing of nuclear 
weapons in all normal and credible, abnormal environments. 

(U) There shall be positive measures to ensure adequate security 
of nuclear weapons pursuant to DoDD 5210.41. 

(U) Joint DoD-DOE study groups, chaired by a Military Service, 
that periodically analyze each nuclear weapon system to ensure 
it meets the four nuclear weapon safety standards. 
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Nuclear Weapon 

Significant 

Incident 



Nuclear Weapon 
Surety 



Nuclear Weapon 
System 



Nuclear Weapons 

Technical 

Inspection 



Nuclear meld 



Nuclear-capable 
Unit 
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(U) An unexpected event involving nuclear weapons or nuclear 
weapon components or a nuclear weapon transport or launch 
vehicle when a nuclear weapon is mated, loaded, or on board that 
does not fall in the nuclear weapon accident category but: 

• (U) Results in evident damage to a nuclear weapon or 
radiological nuclear weapon component to me extent that major 
rework, complete replacement, or examination or recertification 
by the DOE is required. 

• (U) Requires immediate action in the interest of safety or 
nuclear weapons security. 

• (U) May result in adverse public reaction (national or 
international) or inadvertent release of classified information. 

• (U) Could lead to a nuclear weapon accident and warrants that 
senior national officials or agencies be informed or take acUon. 

tU) Materiel, personnel, and procedures which contribute to the 
security, safety, and reliability of nuclear weapons and to the 
assurance that there will be no nuclear weapon accidents, 
incidents, unauthorized weapon detonations, or degradation in 
performance at the target. 

(U) A nuclear weapon and a means for delivering it to the target 
with associated support equipment, noncombat delivery vehicles, 
facilities, procedures, and personnel. 

tU) A Service or DNA inspection of a nuclear-capable unit 
conducted to examine nuclear weapons technical assembly, 
maintenance, storage functions, logistic movement, handling, 
and safety and security directly associated with these functions. 
The NWn is encompassed within the following inspections: 

• (U) Defense Nuclear Surety Inspection (DNSI) conducted by 
DNA. 

• (U) Nuclear Surety Inspection (NSI) conducted by the Army. 

• (U) Navy Technical Proficiency Inspection (NTPI) and Nuclear 
Weapons Acceptance Inspection (NWAI) conducted by the Navy. 

• (U) Nuclear Surety Inspection (NSI) and Initial Nuclear Surety 
Inspection (INSI) conducted by the Air Force. 

(U) An energy release through nuclear fission or fusion 
equivalent to or greater than the energy released by detonation of 
4 pounds (1.8 kilograms) of TNT. Also called nuclear detonation. 

(U) A unit or an activity assigned responsibilities for 
assembling, maintaining, transporting, or storing war reserve 
nuclear weapons, their associated components and ancillary 
equipment. 
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Nuclear-capable 
Unit 



Nuisance Alarm 



Numerical 
Master List 



On-Scene 

Commander 

(OSC) 

On-Site 



One-Point 
Detonation 

One-Point Safe 



Operational 
Combination or 
Code 



(U) A military unit organized and trained to transport, store, 
maintain, provide security for, or employ nuclear weapon 
systems. 

(U) Activation of an alarm sensor by some influence for which 
the sensor was designed but which is not related to an intrusion 
attempt. 

(U) A master list, split into Parts A and B, containing all of the 
plain text operational PAL combinations within a command. 
NMLs are produced, handled, and used under strict two-person 
control, split-knowledge procedures. 

(U) The Flag or General Officer designated to command the DoD 
response efforts at the accident site. 



(U) That area around the scene of a nuclear weapon accident or 
significant incident under the operational control of the 
Installation commander, facility manager, DoD OSC. or DOE 
team leader. The on-site area includes any area which has been 
established as an NDA or NSA. 

(U) A detonation of HE (High Explosives) initiated at a single 
point. 

(U) The criterion for design safety that a weapon must have less 
than one chance in a million of producing a nuclear yield of 
more than four pounds of TNT (equivalent energy release) when 
the high explosive is Initiated and detonated at any single point. 



Operational 
Sealed 

Authenticator 

Operations 
Center 



Operations 
Secuxity 



Oralloy 



(U) A facility from which operations are controlled or directed. 
These facilities include command centers, alternate command 
centers, command posts (mobile and fixed), emergency actions 
elements, combat alert or operations centers, airborne command 
posts, and similar facilities. 

fU) The process of denying adversaries information about 
friendly capabilities and intentions by identifjring, controlling, 
and protecting indicators associated with planning and 
conducting military operations and other activities. 

tU) Enriched uranium. One of the primary fissionable materials 
in nuclear weapons. 
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Orange Book 
Terminology 



Outbreak of 
Nuclear War 



Outsider 
PAL Material 



PAL or CS 
System 



PAL Recode Team 



PAL Unit Card 

PAL Unlock 
Value 



Partitioned 
Security Mode 



Periodic 

Reinvestigation 

(PR) 



(U) Reference (k), also called the Orange Book, classified 
Automated Information Systems lAIS) into four broad 
hierarchical divisions of security protection. Within divisions C 
and B there are further subdivisions called classes. These classes 
also are ordered in a hierarchical manner characterized by the 
set of computer security features they possess (see Security 
Features definition). 

(U) The initiation of actual authorized or Intended nuclear 
weapon use by one country against another, ranging in scope 
from use of a single weapon to a full-scale nuclear exchange. 

(U) See Third Party Agent. 




(U) A team composed of US commissioned oflficer. warrant 
officers, or nonco'mmissioned officers in the grade of E-6 or 
above who insert numerical combinations into the PAL devices. 
At least one member of the team is a commissioned or warrant 
officer. Receding with APCs on a no-knowledge basis may be 
accomplished by a recode team composed of noncommissioned 
officers in the grade of E-7 or higher. (Receding operations and 
personnel requirements at a depot using CLS and/or Depot 
Storage Codes will be in accordance with the applicable Joint 
Nuclear Weapons Publication.) 

(U) See Unit Card. 




(U) A mode of operation wherein all personnel have the 
clearance, but not necessarily formal access approval and need- 
to-know for all information handled by the Automated 
Information Systems. This security mode encompasses the 
compartmented mode defined in DCID No. 1/6, reference (g). 

(U) An investigation conducted every 5 years for the purpose of 
updating a previously completed background or special 
background investigation on persons occupying positions 
referred to in paragraphs 3-700 through 3-710. The scope will 
consist of a personal interview. NAC, LACs, credit bureau checks, 
employment records, employment references and developed 
character references and will normally not exceed the most 
recent 5 year period. 
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Permissive 
Action Link 
(PAL) 



Permissive 
Action Link 
(PAL) Command 

Permissive 
Action Link 
(PAL) 

Management 
Control Team 



Permissive 
Action Link 
Codes 



Personnel 
ReliabiUty 
Program (PRP) 



Personnel 
Security 
Investigation 
(PSI) 



(U) A device included in or attached to a nuclear weapon system 
to preclude arming and/or launching until the insertion of a 
prescribed discrete code or combination. It may include 
equipment and cabling external to the weapon or weapon system 
to activate components within the weapon or weapon system. 

(U) A code or other signal which will cause or permit operation 
of a permissive action link. 



(U) A team composed of at least four US militaiy personnel 
responsible for the management and control of the unified or 
specified command PAL program. The team is divided into A 
and B sections with a minimum of two persons in each section. 
At least one member of each section is a commissioned or 
warrant officer. Noncommissioned officers in grade E-7 and 
above may participate as one half of an A or B Team as required. 

• (U) PAL-Classified Logistic Shipment Code: A PAL code used 
only during logistics shipment of nuclear weapons. See classified 
logistic shipment code. 

• (U) PAL-Code Identifier: Unclassified alphanumeric sequence 
corresponding to the appropriate PAL code above. See code 
identifier. 

• (U) PAL-Depot Storage Code: A PAL code used only during 
temporary storage of nuclear weapons when operational codes 
are not appropriate. See depot storage codes. 

• (U) PAL-Operational Code: A PAL code used within a specified 
or unified command to lock or unlock nuclear weapons. See 
operational combination or code. 

(U) A DoD program implemented for all personnel who control, 
handle, have access to, or control access to nuclear weapon 
systems. The program covers selection, screening, and 
continuous evaluation of the personnel assigned to various 
nuclear duties. The program seeks to ensure that personnel 
coming under its punriew are mentally and emotionally stable 
and reliable. 

(U) Any Investigation required for the purpose of determining 
the eligibility of DoD military and civilian personnel, contractor 
employees, consultants, and other persons affiliated with the 
Department of Defense, for access to classified information, 
acceptance or retention in the Armed Forces, assignment or 
retention in sensitive duties, or other designated duties requiring 
such investigation. PSIs include investigations of affiliations 
with subversive organizations, suitability information, or 
hostage situations (see paragraph 2-403) conducted for the 
purpose of making personnel security determinations. They also 
include investigations of allegations that arise subsequent to 
adjudicative action and require resolution to determine an 
individuals current eligibility for access to classified 
information or assignment or retention in a sensitive position. 
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Physical Security 



Phjrsical Security 
Equipment (PSE) 



Pindown 



Plutonium (Pu) 
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(U) That part of security concerned with physical measures 
designed to safeguard personnel; "to prevent or delay unauthorized 
access to equipment, installations, material and documents; and 
to safeguard them against espionage, sabotage, damage, and theft. 

(U) A generic term encompassing any item, device, or system that 
is used primarily for the protection of Government property, 
including nuclear, chemical, and other munitions, personnel, 
installations, and in the safeguarding of national security 
information and material, including the destruction of such 
information and material both by routine means and by 
emergency destruct methods. 

(U) A deliberate action taken by an adversary to disrupt the 
nuclear command and control system which precludes the 
intended authorized use of nuclear weapons. Pindown may be an 
intended or unintended byproduct of a separate, deliberate 
adversary action. 

(U) An artificially produced fissile material. The Pu-239 is 
primarily used in nuclear weapons. 

(U) The maximum amount of fissile materials, usually stated as 
kilograms of Pu, that may be contained among all nuclear 
weapons in a particular storage or transport volume or space. 



PMCT One-Time 
Pad 
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PredictabiUty 
Measures 



President 



Prevent 



Primary 



Principal NC2 
Decision Makers 



fin AcUons designed to Increase openness and predictability. 

Notification, observauon. forecasting, and/or 
inspection of military exercises. 

tU) ••president" as used In this directive. ^eludes an offlci^^f ° 
succeeds to the Office of the Presidency under the Consutuuon 
and under 3.U.S.C. 19. as well. 

(in As used in the DoD Nuclear Weapon System Safe^ 
assurance that the event Will not occur. 




Programmable 

Read-Only 

Memory 



Properly Cleared 



Purge 




Quantity/ 
Distance (QD) 
Safety Standards 

Radioactivity 



control material involved. 

nn Removal of sensitive data from an Automated Information 
S?stS^TT^^he enTof a period of processing, including from 

a purge. 

highways, railways, magazines, and other installations. 

fin Tv,^ oT,nntaneous emission of radiation, generally alpha or 
Sa^a^?les~ac^panled by gamma rays from the nuclei 
of an unstable isotope. 
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Radiological 
Accident 



Radiological 
Assistance 



Radiological 
Assistance 
Program Team 
(RAP Team) 

Radiological 
Control 

(RADCON) Team 

Radiological 
Control Area 
(RCA) 

Radiological 
Survey 

Re-entxy 

Recommendation 
(RER) 



Real Time 
Assessment 



Reassociation 



(U) A loss of control over radfation or radioactive material that 
presents a hazard to life, health* or property or that may result 
in any member of the general population exceeding exposure 
limits for ionizing radiation. 

(U) That assistance provided after an accident involving 
radioactive materials to: 

(U) Evaluate the radiological hazard. 

(U) Accomplish emergency rescue and first aid. 

(U) Minimize safety hazards to the public, 

(U) Minimize exposure of personnel to radiation or radioactive 
material. 

(U) Minimize the spread or radioactive contamination. 

(U) Minimize damaging effects on property. 

(U) Disseminate technical Information and medical advice to 
appropriate authorities. 

(U) DOE teams available through DOE regional offices to assist 
in radiological emergencies. 



(U) Special radiological teams of the US Army and US Navy 
organized to provide technical assistance and advice in 
radiological emergencies. 

CU) ' The control area encompassing all known, or suspected, 
radiological contamination at a nuclear weapon accident. 



(U) The directed effort to determine the distribution of 
radiological material and dose rates in an area. 

Advice provided to the State concerning guidance that may be 
Issued to members of the public on returning to an area affected 
by a radiological emergency, either permanently or for short- 
term emergency actions. 

(U) Instantaneous assessment of the actual cause for activation 
of the sensor alarm by either direct visual assessment or with the 
aid of electro-optical equipment, e.g., closed circuit television. 



^1 


























m 
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Reoode 



Recovery 
Procedures 

Release 



Releasing 
ReUabiUty 



(U) An operation changing a combination or code previously set 
into a PAL, CSS, or PES device so the device can be unlocked, 
locked, or receded when the new combination or code is 
subsequently inserted. 

(U) See Explosive Ordnance Disposal Procedures. 




(U) The separation of a missile or gravity bomb with a nuclear 
warhead from a delivery aircraft. 

(D) The probability, without regard to countermeasures, that a 
nuclear weapon, sub-assembly, component, or other part will 
perform in accordance with its design intent or requirements. 
Statements of functionability, as well as dud or other failure 
probabilities, are included. 



Remote Destnict 



Render Safe 
Procedures 

Reserve 
Editions 

Residual 
Contamination 



Residual 
Radiation 



Response Force 



Restricted Area 



(U) A device and/ or system which precludes nuclear detonation 
of a launched nuclear weapon and may also terminate its flight. 

tU) See Explosive Ordnance Disposal Procedures. 



(U) Editions of sealed authentication or PAL, CSS, or PES 
material that have not been designated EFFECTIVE. 

(U) Contamination which remains after steps have been taken to 
remove it. These steps may consist of nothing more than 
allowing the contamination to decay naturally. 

(U) Fission products and radioactive debris from a nuclear 
explosion, including radioactivity induced in the surrounding 
environment. 

(U) A security force of personnel (not including those on fixed 
guard posts), appropriately armed and equipped, whose primary 
duty is to provide initial or follow-up response to those 
situations which threaten or affect the security of the nuclear 
weapons concerned. Response forces and times for shipboard 
application shall be as set forth in Chapter Xlll. 

(U) An area to which entry is subject to special restrictions or 
control for security reasons, or to safeguard property or material. 
This does not Include those designated areas restricting or 
prohibiting overflight by aircraft. Restricted areas may be of 
different types depending on the nature and varying degree of 
importance of the security interest, or other matter contained 
therein. Restricted areas must be authorized by the 
installation /activity commander, properly posted, and shall 
employ physical security measures. 
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Restricted Data 



Retrofit Program 



RF, Radio, or 
Radar Blackout 



Risk 



Risk Analysis 



Risk Index 



Risk 

Management 



Risk Reduction 
Measures 



Roentgen 



Roentgen 
Equivalent Man/ 
Mammal (rem) 



Safeguards 



(U) All data (information) concerning (a) design, manufacture, or 
use of atomic weapons: (b) the production of special nuclear 
material; or (c) the use of special nuclear material in the 
production of energy. The term does not include data declassified 
or removed from the restricted data category pursuant to Section 
142 of the Atomic Energy Act of 1954. 

(U) A program to make approved specified changes to existing 
nuclear weapons or parts: may be carried out at production, 
assembly, storage, or deployment sites. 

(U) Complete disruption of RF (radio frequency) signals over 
large areas caused by ionization from the radiative outputs of a 
high-altitude nuclear explosion. 

(U) A combination of the likelihood that a threat shall occur, the 
likelihood that a threat occurrence shall result in an adverse 
Impact, and the severity of the resulting adverse impact. 

(U) An analysis of system assets and vulnerabilities to establish 
an expected loss from certain events based on estimated 
probabilities of occurrence. 

(U) The disparity between the minimum clearance or 
authorization of Automated Information Systems* (AIS) users 
and the maximum sensitivity (e.g.. classification and categories) 
of data handled by the AIS. 

(U) The total process of identifying, measuring, and minimizing 
uncertain events affecting Automated Information Systems 
resources. It includes risk analysis, cost benefit analysis, 
safeguard selection, security test and evaluation, safeguard 
Implementation, and systems review. 

(U) That combination of confidence building and predictability 
measures that would reduce the probability of outbreak of 
nuclear war as a result of accident, misinterpretation, 
miscalculation, terrorism, or unexpected technological 
breakthrough. These need not be unilateral steps and they 
require communication to others and/or participation by others 
to be effective. 

(U) An obsolete unit of exposure of gamma (or X-ray) radiation in 
field dosimetry. One roentgen is essentially equal to one rad. 

(U) One rem is the quantity of ionizing radiation of any t3rpe 
which, when absorbed by man or other mammals, produces a 
physiological effect equivalent to that produced by the absorption 
of one (1) roentgen of X-ray or gamma radiation. The SI unit 
replaced the rem. 

(U) An integrated system of physical protection, material 
accounttag, and material control measures designed to deter, 
prevent, detect, and respond to unauthorized access, possession, 
use, or sabotage of nuclear weapons, NC2, and associated 
information and facilities. 
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RESTRICTED DATA' 



Safety Rules 
Safing 

SAS IdenUner 



Sealed 

Authentication 
System (SAS) 



Sealed 

Authenticator 



Sealed Pit 

Secondary 
Security 

Seciuity Area 



Security 
Clearance 

Security Features 



tU) Procedural safeguards for nuclear weapon systems that are 
derived from safety studies or operational safety reviews, are 
developed and processed under this Directive, and are approved 
by the Secretary of Defense. 

(U) As applied to weapons and ammunition, the changing from a 
state of readiness for initiation to a safe condition. 




(U) One that is hermetically closed to protect nuclear materials 
from the external environment. 

tU) A nuclear stage physically separate from the primary. 

(U) The total spectrum of procedures, facilities, equipment, and 
personnel employed to provide a secure environment for nuclear 
weapons. 

(U) The area surrounding the accident site in an overseas country 
where a two-person security policy is established to prevent 
unauthorized access to classified defense information, equipment 
or material. The cooperation by local authorities and host 
countries consent should be obtained prior through host nation 
agreements. . 

(U) A determination that a person is eligible under the staridards 
of this Regulation for access to classified information. 

(U) The security-relevant functions, mechanisms, and 
characteristics of Automated Information Systems hardware and 
software (e.g.. identification, authentication, audit trail, access 
control). 



Security Force (U) Those persons whose primary duties are to protect nuclear 

weapons. 
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Security Mode 



Security 
Safeguards 



Selective Release 



Selective Unlock 
Value 



Senior FEMA 
Official (SFO) 

Senior Officer of 
the Intelligence 
Community 
(SOIC) 



Sensitive 
Compartmented 
Information 
(SCI) 

Sensitive 
Function 



Sensitive 
Information 
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(U) A mode of operation in which the DAA accredits an 
Automated Information Systems to operate. Inherent with each 
of the four security modes (dedicated, system high, multilevel, 
and partitioned) are restrictions on the user clearance levels, 
formal access requirements, need-to-know requirements, and the 
range of sensitive information permitted on the Automated 
Information Systems. 

(U) The protective measures and controls that are prescribed to 
meet the security requirements specified for an Automated 
Inforaiatlon Systems. These safeguards may include, but are not 
necessarily limited to, hardware and software security features; 
operation procedures: accountability procedures: access and 
distribution controls: management constraints: personnel 
security; and physical structures, areas, and devices. 



(U) A person appointed by the Director of FEMA to coordinate 
the Federal Response to a civil emergency. 

tU) The DoD Senior Officers of the Intelligence Community 
include: the Director, National Security Agency/ Central Security 
Senrice: Director, Defense Intelligence Agency: Assistant Chief of 
Staff for Intelligence, US Army; Assistant Chief of Staff for 
Intelligence, US Air Force, and the Director of Naval Intelligence. 
US Navy. 

(U) Classified information about or derived from intelligence 
sources, methods, or analytical processes that is required to be 
handled exclusively within formal access control systems 
established by the Director, Central Intelligence, 

(U) A function in support of atomic energy defense programs 
whose disruption could reasonably be expected to have a 
significant adverse effect on the health and safety of the public or 
the common defense and security (see definition of Atomic 
Energy Defense Programs). 

(U) Any information, the loss, misuse, or unauthorized access to 
or modification of which could adversely affect the national 
interest or the conduct of the Federal programs, or the privacy to 
which individuals are entitled under Section 552a of U.S.C. (The 
Privacy Act) but which has not specifically been authorized under 
the criteria established by an ExecuUve order or Act of Congress 
to be kept secret in the interest of national defense or foreign 




policy. 
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Sensitive 
Position 



Sensitive 

Unclassified 

Information 



Service 

Cryptologistic 

Element 



Service Response 
Force (SRF) 



Set 



(U) Any position so designated within the Department of 
Defense, the occupant of which could bring about, by virtue of the 
nature of the position, a materially adverse effect on the national 
security. All civilian positions are either critical-sensitive, 
noncritical-sensitive. or nonsensitive as described in paragraph 
3-101. 

(U) Any information which by loss, misuse, unauthorized access, 
or modification might adversely affect US national Interest, the 
conduct of DoD programs, or the privacy of DoD personnel (e.g.. 
FOIA exempt Information and information whose distribution is 
limited by DoD Directive 5230.24 

(U) The element or agency of each Military Department charged 
with accounting for PAL. CSS, or PES cipher system components 
and with distributing, storing, and accounting for other COMSEC 
material within the department. 

(U) A DoD response force appropriately manned, equipped, and 
able to perform and coordinate all actions necessary to control 
and recover from an accident or significant incident. The 
specific purpose of a Service/ agency response force is to provide 
nuclear weapon accident/significant incident assistance. 
Service/agency response forces are organized and maintained by 
those Services or agencies which have custody of nuclear 
weapons or radioactive nuclear weapon components. 




Significant 
guantity of 
Special Nuclear 
Material 



SIOP-ESI 



Site Security 
Control Center 
(SSCC) 



Small Arms Fire 



(U) Refers to uranium-235 (contained in uranium enriched 20 
percent or more in the uranium-235 isotope) alone, or in 
combination with plutonium and/or uranium-233 when 
(multiplying the plutonium and/or uranlum-233 content by 2- 
1/2) the total is 5.000 grams (5 kilograms) or more: and 
plutonium and /or uranlum-233 when the plutonium and/ or 
uranium-233 content is 2.000 grams (2 kilograms) or more. 



SIOP Unlock 








Value 1 









(U) An acronym for Single Integrated Operational Plan- 
Extremely Sensitive Information, a DoD Special Access Program. 

(U) A facility from which control of site sentry and response 
forces is exercised. This facility may include the alarm center, 
the visual assessment facilities, and other appropriate security 
facilities. | 

(U) Projectiles of the ball type with Irtipact force up to that equal 
to a 7.62 mm bullet fired from an M-14 rifle or equivalent at its 
highest velocity using service ammunition. 
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Source Data 
Modules 



Special Access 
Program (SAP) 



Special 
Background 
Investigation 
(SBI) 



Special Nuclear 
Material 



Special Nuclear 

Material 

Equipment 



Special Nuclear 
Material Facility 

Special Weapons 
Overflight Guide 
iSWOG) 




tU) Any program imposing need-to-know or access controls 
beyond those normally required for access to CONFIDENTIAL, 
SECRET, or TOP SECRET infbmiation. Such a program includes, 
but is not limited to, special clearance of investigative 
requirements, special designation of officials authorized to 
determine need-to-know, or special access lists of persons 
determined to have a need-to-know. 

(U) A personnel security investigation consisting of all of the 
components of a HI plus certain addition investigative 
requirements. The period of investigation for an SBI is the last 
15 years or since the 18th birthday, whichever Is shorter, 
provided that the last 2 full years are covered and that no 
investigation will be conducted prior to an individual's 16th 
birthday. 

CU) Includes plutonium, uranium enriched in the isotope-233 or 
in the isotope-235, and any other material determined to be 
special nuclear material pursuant to the provisions of Section 51 
of the Atomic Energy Act of 1954, as amended , but does not 
include source material: or any material artificially enriched by 
any of the foregoing, but does not include source material. 

(U) Equipment, systems, or components whose failure or 
destruction would cause an impact on safeguarding DoD SNM 
resulting in an unacceptable interruption to a national security 
program or an unacceptable impact on the health and safety of 
the public. 

(U) A DoD facility that performs a sensitive function (see 
definition of Sensitive Function). 

(U) A US Air Force developed guide, applicable to all elements of 
the DoD, which delineates areas authorized for overflight by US 
aircraft canying nuclear weapons, and the specific security 
classification for overflight of foreign countries. 



Split Knowledge 
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Standby 

Emergency Power 
Source 

Stockpile-to- 
Target Sequence 
(STS) 



Storage Area 



Strategic Nuclear 
Forces 



Strategic 
Warning 

Surety 



Survivability 



System High 
Security Mode 



Systems Security 

Engineering 

(SSE) 



(U) A separate and distinct source of power, internal to the site 
and in addition to the site's primary electrical power source, 
normally an engine generator. 

(U) A document, developed for each nuclear weapon, that 
supplements the Military Characteristics by describing the 
logistical and operational environments that the nuclear weapon 
can encounter. It is developed through an evolutionary process 
beginning in Phase 1 and is a "living" document that is reviewed 
continuously and revised as required throughout the life of a 
nuclear weapon project. 

(U) The areas within the boundary fence, or outer boundary fence 
where two are installed, where nuclear weapons are retained for 
use elsewhere. 

(U) Weapon system (ICBM, SLBM, and aircraft) that possess 
intercontinental range (greater than 5,500 km) and are capable of 
striking one or more enemy targets to satisfy US nuclear 
employment objectives. 

(U) See Joint Pub 1-02. 

fU) The total spectrum of procedures, facilities, equipment, 
personnel and weapon design features that provide for the safety, 
security, use control and reliability of the nuclear weapons 
stockpile. 

(in The ability to withstand or repel attack, or other hostile 
acUon. to the extent that essential functions can continue or be 
resumed after onset of hostile action. 

tU) A mode of operation wherein all users having access to the 
Automated Information Systems possess a security clearance or 
authorization, but not necessarily a need-to-know, for all data 
handled by the Automated Information Systems. If the 
Automated Information Systems precesses special access 
information, all users must have formal access approval. 

(U) A element of system engineering that applies scientific and 
engineering principles to identify security vulnerabilities and 
minimize or contain risks associated with these vulnerabilities. 
SSE uses mathematical, physical, and related scientific 
disciplines, and the principles and methods of engineering design 
and analysis to specify, predict, and evaluate the vulnerability of 
the system to security threats. 



Tactical Ferry 




Tactical Warning tU) See Joint Pub 1-02. 
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Tamper 



Tamper Device 



Technical 
Kno^edge 



Technical 
Security Material 



Telecommuni- 
cations 



Termination 



Terrorism/ 
Sabotage 



Third Party 
Agent 



Transfer 



Transfer of 
Nuclear or 
Chemical 
Weapons 

Trap Door 



(U) To perform intentionally .an incorrect or unauthorized act 
that could cause prearming, arming, launching, firing, releasing, 
or detonation of a nuclear weapon or degradation of weapon 
performance, 

fU) Additional safeguards or protective mechanisms designed to 
prevent an intruder from circumventing or "tampering" with in- 
place security systems. 

(U) Knowledge, however obtained, that would allow an individual 
to tamper with a nuclear weapon or nuclear component in a 
manner that such tampering would not be detected during normal 
prefire operations or weapon-monitoring Inspections and could 
cause, then or later, unauthorized prearming. arming, launching, 
firing, releasing, or detonation of a nuclear weapon or 
degradation of weapon performance. 

(U) Equipment, components, devices, and associated 
documentation or other media that pertain to cryptography or to 
the securing of telecommunications and automated information 
systems. 

(U) The preparation, transmission, communication, or related 
processing of information by electrical, electromagnetic, 
electromechanical, electro-optical, or electronic means. 

(U) An action or. order to terminate nuclear strikes previously 
authorized for execution. Inherent in the termination process is 
the relocking and /or receding of applicable weapon systems by 
US weapon custodians at the earliest opportunity. 

(U) An act falling short of a military operation, or an omission. 
Intended to cause physical damage or disruption in order to 
further a subversive political aim or to achieve an objective of a 
foreign power. Sabotage is distinguished from malicious damage 
by its motive. 

(U) A person not included in the definition of cognizant agent. 
This may include persons in the persoimel reliability program. 
This does not allow, however, for two agents to be working 
together under the two-person rule or two-person control 
provisions. Having both members of a two-person control team 
voluntarily cooperating as agents is considered improbable. 




(U) A hidden software or hardware mechanism that permits 
system protection mechanisms to be circumvented. It is 
activated in some non-apparent manner, e.g.. special "random" 
key sequence at a terminal. See also Back Door and Trap Door. 
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Tritium 



Trojan Horse 



Trusted Agent 
Trusted 

Computer System 



Trusted 

Computing Base 
(TCB) 



Trusted 
Functionality 

Trusted Products 

Trusted Software 
Tuballoy (TU) 



Two-Man Rule / 
Two-Person Rule 



Two-Person 
Control (TPC) 



CU) Tritium is a radioactive isotope of hydrogen having one 
proton and two neutrons in the nucleus. Tritium is a beta 
emitter. 

(U) A computer program which contains hidden functions that 
surreptitiously exploit the legitimate functions of the program to 
the detriment of security. For example, making a "blind copy" of 
a sensitive file for the creator of the Trojan Horse. See also Back 
Door and Ttap Door. 

CU) See cognizant agent and insider. 

tU) A system with sufficient hardware and software integrity 
measures to allow its use for processing a range of sensitive or 
classified information. 

(U) The totality of protection mechanisms within a computer 
system — including hardware, firmware, and software the 
combination of which Is responsible for enforcing a security 
policy. It creates a basic protection environment and provides 
additional user services required for a trusted computer system. 
The ability of a trusted computing base to correctly enforce a 
security policy depends solely on the mechanisms within the TCB 
and on the correct input by system administrative personnel of 
parameters (such as a user's security clearance) related to the 
security policy. 

(U) That which is determined to be correct with respect to some 
criteria, e.g., as established by security policy. The functionality 
shall neither fall short of nor exceed the criteria. 

tU) Products evaluated and approved for inclusion on the 
Evaluated Products List (EPL). 

(U) The software portion of a trusted computer base. 

(U) A term, of British origin, for uranium metal containing U- 
238 and U-235 in natural proportions, therefore, the term is 
considered ambiguous and its use is discouraged. This term is 
sometimes applied to depleted uranium. See uranium. 

(U) A system designed to prohibit access by an individual to 
nuclear weapons and certain designated components by requiring 
the presence at all times of at least two authorized persons, each 
capable of detecting incorrect or unauthorized procedures with 
respect to the task to be performed. Also referred to as the Two- 
Man Concept or the Two-Man Policy. 

(U) The close surveillance and control of materials at all times 
by a minimum of two persons, each capable of detecting incorrect 
or unauthorized procedures with respect to the task to be 
performed and each familiar with established security 
requirements. 
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(U) No lone individual shall have access to a nuclear weapon. 
During any operation that may require access to nuclear 
weapons* there shall be present a minimum of two authorized 
persons, each capable of detecting incorrect or unauthorized 
procedures with respect to the task to be performed and familiar 
with applicable safety and security requirements. Two authorized 
personnel shall be physically positioned where they can detect 
incorrect or unauthorized procedures with respect to the task or 
operation being performed. 

When application of the two-person policy is required, it shall be 
enforced by the persons who constitute the team during the entire 
period they are accomplishing the task or operation assigned and 
until they leave the area within which the two-person policy is 
required. 

Security procedures and equipment, intrusion detection systems, 
and security force personnel shall ensure positive identification 
and control of all persons entering Limited and Exclusion Areas. 
Entry control procedures shall ensure no lone individual is 
peraiitted in an Exclusion Area or to have access to a nuclear 
weapon. 

The only exceptions to the two-person policy shall be those 
specifically prescribed in approved nuclear weapon systems 
safety rules established in accordance with DoD Directive 3150.2. 

(U) The capability and opportunity to obtain, alter, or substitute 
positive control material used in the execution or release of 
nuclear or chemical weapons or to obtain, alter, or substitute the 
internal values of such material. A person authorized to handle 
positive control material does not have access if the ability to 
obtain, alter, or substitute the internal values is prevented 
through observation by authorized individuals who are also 
authorized to handle positive control material, or by physical 
controls that prevent access. Physical control practices within 
the DCS and protective packaging methods employed by shippers 
prevent access to material by DCS and DCS-designated couriers 
and assistants. 

Unauthorized (U) Methodology for analyzing elements that can lead to an 

Launch Analysis unauthorized use of a nuclear weapon. Identifies what a 
(ULA) cognizant agent, outsiders, or combination of the two can do to 

bypass or defeat elements, components, subsystems, or systems to 
achieve a deliberate detonation, launch, release, transfer or 
termination. Methodology also applied to study of security of 
nuclear weapon storage sites. Not quantitative in nature because 
of inability to quantify human intent and actions. 

(U) A detonation, launch, release, or transfer for use of nuclear 
weapons, or termination of nuclear operations, not authorized by 
the President, resulting from a deliberate attempt by one or more 
individuals to circumvent critical elements of the nuclear 
command and control process. 



Two-Person 
Policy 



Unauthorized 
Access 



Unauthorized 
Use 
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Unexpected 

Technological 

Breakthrough 



Unit Card 



Unlock 



Unlock-Relock^ 
PAL Team 



Uranium 



US National 



Use 



Use Control 



Use Control 
Measures 



tU) The achievement, by one nation, of a militarily significant 
technological capability which could materially alter the 
military balance with other nations resulting in an increased 
likelihood of the use of nuclear weapons. 




(U) The act of Inserting a previously set combination or code 
into a positive control device so that arming, launching, or 
maintenance of a nuclear weapon or weapon system can occur. 
The act is reversible. 




(U) Uranium is a heavy, silvery white, radioactive metal. In air, 
the metal becomes coated with a layer of oxide that will make it 
appear from a golden-yellow color to almost black. Uranium is 
an alpha emitter. 

(U) A citizen of the United States or a person who, though not a 
US citizen, owes permanent allegiance to the United States. Title 
8 U.S.C. 1408 provides detailed information as to identification 
of noncitizen US nationals. 




(U) The positive measures that, given access, allow the 
authorized use and prevent or delay unauthorized use of nuclear 
weapons, and is accomplished through a combination of weapon 
system design features, operational procedures, and system safety 
rules. 

tU) Systems, devices, removeable components, and procedures 
which allow timely authorized use of a nuclear weapon while 
precluding or delaying unauthorized nuclear detonation. These 
measures are in addition to physical access controls which 
always apply to nuclear weapons. 
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Use Control 
Systems 



Use Denial 
Systems 



Users 



Users 



Using custodians 



fU) The total spectrum of devices, equipment, and procedures 
used to ensure authorized use, and to prevent unauthorized use. of 
nuclear weapons. Three principal methods of achieving use 
control have evolved over time: 

• (U) Separate secure storage of critical components. 

• (U) Permissive Action Links (PAL) for the nuclear weapon; or 

• (U) Coded control that prevents weapon prearming or weapon 
launch. 

tU) Stringent procedures play a fundamental role in each of these 
methods. 

(U) Components, subsystems, or systems and their implementing 
procedures that, in a nuclear warhead or nuclear weapon system, 
preclude or delay unauthorized nuclear detonation by: 

• (U) Disablement of the warhead causing it to be incapable of 
producing a significant nuclear yield without extensive nuclear 
package disassembly and repair of critical components: 

• (U) Removal and separate protection or destruction of 
components required to produce a nuclear detonation; and/br 

• (U) Physical security measures that deny or delay unauthorized 
access. 

(U) People or processes accessing an Automated Infomiatlon 
Systems either by direct connections (i.e.. via terminal) or 
indirect connections (i.e.. prepare input data or receive output 
that is not reviewed for content or classification by a responsible 
individual). 

(U) Personnel who employ positive control material to issue or 
respond to an actual or exercise nuclear or chemical control 
order. 

(U) The COMSEC custodians responsible for the receipt, storage, 
accountability, and destruction of positive control material in 
direct support of the users. In small units, a using custodian may 
also be a user as long as the two-person control criterion is met. 
These personnel will be appointed in writing, in accordance with 
appropriate Service regulations. 



Validity 



Variance 
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Verification 
Team 



Viewing 



Visual 

Assessment 

Facility 

VulnerabUlty 



Waiver 
Warhead 



Warh ead Section 
(WHS) 

Weak-link/ 
Strong-Link 



Weapon Debris 
(nuclear) 



Weapons 
Recoveiy 



Weapons 
Recovery 



(U) A team, composed of two military members (one "A" team 
member and one 'B" team member) that verifies the operational 
combination placed In iPAL devices. At least one of the two Is a 
commissioned or warrant ofiQcer the other Is grade E-7 or above. 
Verification is performed by personnel other than those who 
installed the combination or code and with equipment other than 
that used In the Initial recede. 

(U) The opportunity to observe or Identify, during the performance 
of assigned duties, the internal values of positive control material 
when the material is being used for an authorized procedure. 

(U) A facility where real time assessment Information concerning 
the actual cause of activation of sensor alarms is collected and 
acted upon. 

(U) The susceptibility of a weapon or Its components to degradation 
from adverse environments, particularly the effects of a defensive 
nuclear burst. 

(U) An approved temporary deviation from the provisions of this 
manual that creates a security vulnerability. 

(U) That part of a mlssUe, projectile, torpedo, rocket, or other 
munition which contains either the nuclear or thermonuclear 
system, high explosive ^stem, chemical or biological agents, or 
Inert materials Intended to Inflict damage. 

(D) A completely assembled warhead including appropriate skin 
sections and related components. 

(U) A saflng design technique that electrically and physically 
Isolates a weapon's firing circuits to ensure a predictable and 
desirable response of the electrical system In normal, abnormal, or 
accident envlrormients. 

(U) The residue of a nuclear weapon after it has exploded or bumed; 
that is, the materials used for the casing, and other components of 
the weapon, plus tmexpended plutonium or urarUtim, together with 
fission products, If any. 

(U) Includes a comprehensive assessment of the accident, 
neutralizing the weapon hazards, and removing, packaging, and 
shipping of the weapon hazards. 

(U) Pursuit and search for seized/stolen nuclear weapon(s) 
removed from site. 
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